evilpacket/express-secure-skeleton — pull request #2 by mattjay (2013-05-28 20:45:15+00:00)
Title: 'Protect index file to only Auth'd users. Skeleton Auth functions.

Wrote some skeleton auth functions that would plug in to a user model to check if authenticated before allowing to see the index.

From what I can tell the way this works is not a secure handling of cookies and is vulnerable to (at least) session fixation.

Felt like this was most of the legwork though and would love to see how you could spin this to use cookies correctly.