Usage

Session Middleware

zend-expressive-session provides middleware consuming PSR-7 HTTP message instances, via implementation of PSR-15 interfaces.

This middleware composes a persistence instance, and uses that in order to generate a session container, which it pushes into the request it delegates to the next middleware. Once a response is returned, it uses the persistence instance to persist the session data and provide information back to the client.

The above two paragraphs are longer than the body of the middleware implementation:

namespace Zend\Expressive\Session;

use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;

class SessionMiddleware implements MiddlewareInterface
{
    public const SESSION_ATTRIBUTE = 'session';

    private $persistence;

    public function __construct(SessionPersistenceInterface $persistence)
    {
        $this->persistence = $persistence;
    }

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler) : ResponseInterface
    {
        $session = new LazySession($this->persistence, $request);
        $response = $handler->handle($request->withAttribute(self::SESSION_ATTRIBUTE, $session));
        return $this->persistence->persistSession($session, $response);
    }
}

Configuration

This package provides a factory for Zend\Expressive\Session\SessionMiddleware via Zend\Expressive\Session\SessionMiddlewareFactory; this factory is auto-wired if you are using Expressive and the zend-component-installer Composer plugin. If not, you will need to wire these into your application.

The factory depends on one service: Zend\Expressive\Session\SessionPersistenceInterface. You will need to either wire in your persistence implementation of choice, or have the package providing it do so for you.

Adding the middleware to your application

You may pipe this middleware anywhere in your application. If you want to have it available anywhere, pipe it early in your application, prior to any routing. As an example, within Expressive, you could pipe it in the config/pipeline.php file:

$app->pipe(\Zend\Expressive\Session\SessionMiddleware::class);
$app->pipeRoutingMiddleware();

This will generally be an inexpensive operation; since the middleware uses a LazySession instance, unless your persistence implementation does any work in its constructor, the cost is just that of instantiating a few objects.

However, it's often useful to specifically include such middleware directly in the routed middleware pipelines, to ensure other developers are aware of its presence in that route's workflow.

Within Expressive, you can do this when routing, in your config/routes.php file, or within a delegator factory:

$app->post('/login', [
    \Zend\Expressive\Session\SessionMiddleware::class,
    \User\Middleware\LoginHandler::class
]);