Is it possible to have multiple session middlewares?

[cill-i-am]

And if so, how do I access them? I have set up two middlewares like so:

/**
 * Add session middleware (https://github.com/sergiodxa/remix-hono?tab=readme-ov-file#session-management)
 */
app.use(
  // @ts-expect-error - FIXME: require next remix-hono version
  session({
    autoCommit: true,
    createSessionStorage(c) {
      const env = typedEnv(c, envSchema);

      if (!env.SESSION_SECRET) {
        throw new Error('SESSION_SECRET is not defined');
      }

      const sessionStorage = createCookieSessionStorage({
        cookie: {
          name: 'session',
          httpOnly: true,
          path: '/',
          sameSite: 'lax',
          secrets: [env.SESSION_SECRET],
          secure: env.NODE_ENV === 'production',
        },
      });

      return {
        ...sessionStorage,
        // If a user doesn't come back to the app within 30 days, their session will be deleted.
        async commitSession(session) {
          return sessionStorage.commitSession(session, {
            maxAge: 60 * 60 * 24 * 30, // 30 days
          });
        },
      };
    },
  }),
);

app.use(
  // @ts-expect-error - FIXME: require next remix-hono version
  session({
    autoCommit: true,
    createSessionStorage(c) {
      const env = typedEnv(c, envSchema);

      if (!env.SESSION_SECRET) {
        throw new Error('SESSION_SECRET is not defined');
      }

      const sessionStorage = createCookieSessionStorage({
        cookie: {
          name: 'theme',
          httpOnly: true,
          path: '/',
          sameSite: 'lax',
          secrets: [env.SESSION_SECRET],
          secure: env.NODE_ENV === 'production',
        },
      });

      return {
        ...sessionStorage,
        // If a user doesn't come back to the app within 30 days, their session will be deleted.
        async commitSession(session) {
          return sessionStorage.commitSession(session, {
            maxAge: 60 * 60 * 24 * 30, // 30 days
          });
        },
      };
    },
  }),
);

and I can see the two cookies in the dev tools. But calling getSession(c).set('theme', theme) overwrites both

[sergiodxa]

You can’t, but why not use one session?
I usually just use one session or one session and many other cookies.

[cill-i-am]

I guess I could. I have to store a JWT in there as well so i was worried that the session cookie might start hitting size limits. But I can pull what I need out of it and store only that to save space. And if not I can pop the theme into another cookie. Thanks for the help!

[sergiodxa]

If the JWT is too long, you can also consider another session storage mechanism, if you're deploying to Cloudflare you could use createWorkerKVSessionStorage for example.

[cill-i-am]

Yeah that's a good call. We are on AWS so i can ask infra to give me a redis instance if needed