Yes, you should change it. A session secret in connect is simply used to compute the hash. Without the string, access to the session would essentially be “denied”. Take a look at the connect docs, that should help a little bit.
Yes, you should change it. A session secret in connect is simply used to compute the hash. Without the string, access to the session would essentially be “denied”. Take a look at the connect docs, that should help a little bit.