Express Session not persisting after CORS calls
Here's the answer (simple one): I had misconfigured my Session middleware; The cookie.domain
options was causing the problem. Here's the proper configuration :
sessionConfig: -> secret: 'whatever' cookie: secure: false httpOnly: false
This option isn't required/existing (anymore?) with the express/session middleware; Not sure why I originally used it, probably something from an outdated reference (to express/cookie-parser or express/cors).