Questions tagged [session-cookies]

Session cookies enable a server and a browser to establish an identified connection (through cookies) and communicate though it.

Session cookies are temporary files that exist for a particular user for a pre-defined duration. Once this duration is expired, the session cookies are erased.

Session cookies allow a website to keep a state or memory of the visitor as they navigate between pages of the website.

4816 questions
7
votes
1 answer

Cannot change php session cookie name

I copied an existing and successfully running site to a new development server. The login on the new server is now broken, and I tracked it down to the fact that although the session cookie is renamed ... ini_set('session.name', 'DOMAIN1'); ...…
mit
  • 11,083
  • 11
  • 50
  • 74
7
votes
1 answer

ZF2 Set Zend\AuthenticationService to use second session or cookie based on url or module

I have set up two user account modules - administrator and customer. My current set-up means if you log into administrator my app thinks you're logged in as a customer also. The solution I've decided upon is to create a session where the cookie path…
Richard Parnaby-King
  • 14,703
  • 11
  • 69
  • 129
7
votes
0 answers

How to persist the cookies in android even after app close or put in background by pressing menu button in android?

Hello sir i am new in android and want to persist cookies for all time until user click on signout.but present i am using default Cookiemanger which remove cookies after some hours and my app becomes unresponsive so app not able to make further…
Anand
  • 429
  • 2
  • 17
7
votes
1 answer

Django + JSON web tokens + disabling session-based authorization

I am currently working on a Django project that wants to replace and disable Django's traditional cookie-based sessions and replace it with JSON web tokens as a means of user authentication for a user on my website.(User Authentication for the…
7
votes
2 answers

jboss cluster session replication not working (multiple jsessionid cookies)

I'm trying to authenticate on my web application deployed on a jboss working in cluster mode with 2 nodes. After a succesful authentication I get redirected to an admin page where a Filter checks if I am logged in. On standalone mode it works just…
7
votes
2 answers

Only Cookie JSESSIONID set from first Login request is not sent in subsequent requests?

I am not able to understand what's going on. On one of the env. of my webapp (written using ExtJS 4.0) - I see the login request successfully completes but subsequent request fails with 401. When digged a bit more I found in Browser(F12) that 1st…
akjain
  • 1,787
  • 3
  • 20
  • 35
7
votes
1 answer

Why do we need JWT when we have client sessions?

I understand that JWT are stateless tokens that store signed information about the client's claim and are passed to a server via the Authorization HTTP header. My question is, why do we need JWT when we already have client sessions…
Sam
  • 6,414
  • 11
  • 46
  • 61
7
votes
1 answer

Two Set-Cookie headers for ASP.NET_SessionId

I have an ASP.NET app that is returning two Set-Cookie headers for ASP.NET_SessionId. The following appears twice: Set-Cookie: ASP.NET_SessionId=2alwzlvkg2ckvi43s3y0t3lm; path=/; HttpOnly This is happening both locally and on our development and…
Mark Good
  • 4,271
  • 2
  • 31
  • 43
7
votes
1 answer

Cookies received from Server is Secure But Cookies sent to Server is not secure ASP.NET

In my ASP.NET Web application, i have made the below changes to make the ASP.NET_SessionID and .ASPXAUTH Cookies Secure by adding the below entries to web.config and adding the below tag…
Rajesh
  • 83
  • 1
  • 7
7
votes
1 answer

Can a cookie expire when EITHER some time passes OR browser is closed?

I know that I can set expiration date for a cookie, but can I make a cookie expire after some time OR when browser is closed?
Sergej Andrejev
  • 9,091
  • 11
  • 71
  • 108
7
votes
0 answers

Why do certain mobile browsers aggressively lose session?

I have a complex web app, which is working fine in desktop browsers, as well as in the Android native browser (which is part of why I got so long into this project before noticing this problem). The server setup is using the Typesafe Stack…
Justin du Coeur
  • 2,699
  • 1
  • 14
  • 19
7
votes
1 answer

Laravel expire session on browser close not working in Chrome

I am using Laravel Framework version 4.1.21 and the "expire_on_close" option does not end the session in Chrome when the browser is closed. The options in my config/session.php file look like this: 'driver' => 'file', 'lifetime' =>…
medowlock
  • 1,469
  • 1
  • 19
  • 25
7
votes
5 answers

Session is lost after an OAuth redirect

I use CakePHP 2.4. I have an OAuth signin in my website. %99.5 of signins are successfull but %0.5 fails. I have this error for months. I tried many things to debug and log but still I didn't solve the problem. Although most of the requests are good…
trante
  • 33,518
  • 47
  • 192
  • 272
7
votes
1 answer

How can I get $_SESSION data from SESSID?

I have a PHP websocket server (https://github.com/lemmingzshadow/php-websocket/). When an user connects, I want to set/get some session data. The problem is that I can't use $_SESSION because if I do that, instead of clients' session I get the…
Oriol
  • 274,082
  • 63
  • 437
  • 513
7
votes
1 answer

How to set a cookie for iframe on the same domain

I'm trying to make integration of etherpad-lite in the CMS Plone, following Example 1 of the official documentation http://etherpad.org/doc/v1.2.7/ Portal places the cookie "sessionID" with the given value on the client and creates an iframe…
toutpt
  • 5,145
  • 5
  • 38
  • 45