Passport: Updating to 0.3.x from 0.2.x

[JSteunou]

Hi,

I was looking for a changelog or history documentation. By reading the commits log it seems that the major change is related to session. One have to do app.use(passport.session()); now after initialize.

If I do not want to use sessions, is omitting app.use(passport.session()); will be enough? Or is {session: false} still relevant when invoking authenticate? I see it in the documentation still, but is it just a remainder of 0.2.x that need to be removed?

[JSteunou]

somehow linked #397 #375

[JSteunou]

Ok, will answer to myself, {session: false} is still needed...

@jaredhanson could you consider the session option being false by default if passport.session() was not used, and true by default the other way?

[facultymatt]

@jaredhanson please also consider maintaining a changelog.

[faller]

@jaredhanson changelog please.

[mkjois]

@jaredhanson +1 for a changelog!

The suggestion from @JSteunou about default session behavior also would make a lot of sense.

[diegohaz]

+1 for default session behavior

[S1lentium]

bump! for default session