From a7c253018b6540b22571d101ba954856be5591ea Mon Sep 17 00:00:00 2001
From: Hashim Khan <sardarhashim30@gmail.com>
Date: Thu, 23 Jul 2026 05:10:32 +0500
Subject: [PATCH] docs: use const instead of var in README examples

Update README code samples to modern JavaScript style by replacing
var with const. Closes #993.
---
 README.md | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/README.md b/README.md
index 162ea14d..ae3cb0a7 100644
--- a/README.md
+++ b/README.md
@@ -18,7 +18,7 @@ $ npm install express-session
 ## API
 
 ```js
-var session = require('express-session')
+const session = require('express-session')
 ```
 
 ### session(options)
@@ -52,13 +52,13 @@ Settings object for the session ID cookie. The default value is
 In addition to providing a static object, you can also pass a callback function to dynamically generate the cookie options for each request. The callback receives the `req` object as its argument and should return an object containing the cookie settings.
 
 ```js
-var app = express()
+const app = express()
 app.use(session({
   secret: 'keyboard cat',
   resave: false,
   saveUninitialized: true,
   cookie: function(req) {
-    var match = req.url.match(/^\/([^/]+)/);
+    const match = req.url.match(/^\/([^/]+)/);
     return {
       path: match ? '/' + match[1] : '/',
       httpOnly: true,
@@ -193,7 +193,7 @@ have your node.js behind a proxy and are using `secure: true`, you need to set
 "trust proxy" in express:
 
 ```js
-var app = express()
+const app = express()
 app.set('trust proxy', 1) // trust first proxy
 app.use(session({
   secret: 'keyboard cat',
@@ -207,8 +207,8 @@ For using secure cookies in production, but allowing for testing in development,
 the following is an example of enabling this setup based on `NODE_ENV` in express:
 
 ```js
-var app = express()
-var sess = {
+const app = express()
+const sess = {
   secret: 'keyboard cat',
   cookie: {}
 }
@@ -480,7 +480,7 @@ to adjust the `.expires` property appropriately. The following
 are essentially equivalent
 
 ```js
-var hour = 3600000
+const hour = 3600000
 req.session.cookie.expires = new Date(Date.now() + hour)
 req.session.cookie.maxAge = hour
 ```
@@ -906,11 +906,11 @@ based session store. Supports all backends supported by Fortune (MongoDB, Redis,
 A simple example using `express-session` to store page views for a user.
 
 ```js
-var express = require('express')
-var parseurl = require('parseurl')
-var session = require('express-session')
+const express = require('express')
+const parseurl = require('parseurl')
+const session = require('express-session')
 
-var app = express()
+const app = express()
 
 app.use(session({
   secret: 'keyboard cat',
@@ -924,7 +924,7 @@ app.use(function (req, res, next) {
   }
 
   // get the url pathname
-  var pathname = parseurl(req).pathname
+  const pathname = parseurl(req).pathname
 
   // count the views
   req.session.views[pathname] = (req.session.views[pathname] || 0) + 1
@@ -948,11 +948,11 @@ app.listen(3000)
 A simple example using `express-session` to keep a user log in session.
 
 ```js
-var escapeHtml = require('escape-html')
-var express = require('express')
-var session = require('express-session')
+const escapeHtml = require('escape-html')
+const express = require('express')
+const session = require('express-session')
 
-var app = express()
+const app = express()
 
 app.use(session({
   secret: 'keyboard cat',