import type { RequestHandler } from 'express'; /** * DI token for the configured `express-session` middleware. Resolved * once at bootstrap (`main.ts`) and mounted with `app.use(...)` * after `cookie-parser` so cookies are already parsed when the * session middleware reads the session id. * * Usage: * const session = app.get(SESSION_MIDDLEWARE); * app.use(session); */ export const SESSION_MIDDLEWARE = 'SESSION_MIDDLEWARE'; /** * DI token for the absolute-timeout middleware (per ADR-0010 ยง"TTL * policy"). Resolved at bootstrap and mounted in `main.ts` * immediately after {@link SESSION_MIDDLEWARE} so it runs on every * request that carries a session cookie. */ export const SESSION_ABSOLUTE_TIMEOUT_MIDDLEWARE = 'SESSION_ABSOLUTE_TIMEOUT_MIDDLEWARE'; export type { RequestHandler };