vvo/iron-session

Health v2 · maintenance only

Adoption not part of the score

4138 stars · 255 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

iron-session is a secure, stateless, cookie-based session library for JavaScript, storing session data in signed and encrypted cookies decoded server-side without any network or database calls. It works with Next.js, Express, Node.js, and serverless environments.

Use cases

• manage user sessions in a Next.js app
• store session data in encrypted cookies without a database
• add stateless authentication sessions to an Express server
• implement login sessions in serverless functions
• replace JWT-based session handling with encrypted cookies
• handle sessions in Next.js app router with server actions

When to choose

• you want stateless sessions with no database or network overhead
• you're building with Next.js, Express, or Node.js and need cookie-based sessions
• you deploy to serverless platforms where server-side session storage is awkward
• you want the Rails-style encrypted cookie session approach in JavaScript

When to avoid

• you need to invalidate sessions server-side instantly or store large session payloads
• you require server-side session revocation or shared session state across services
• you need a full authentication solution with OAuth, MFA, or user management

Facets

library · maturity active

auth cryptography middleware web-development backend security serverless nextjs cookies session-management stateless express encryption authentication nodejs web-server javascript

Member repositories

For agents

markdown · JSON · MCP: product_card(name="vvo/iron-session")