Questions tagged [session-cookies]

Session cookies enable a server and a browser to establish an identified connection (through cookies) and communicate though it.

Session cookies are temporary files that exist for a particular user for a pre-defined duration. Once this duration is expired, the session cookies are erased.

Session cookies allow a website to keep a state or memory of the visitor as they navigate between pages of the website.

4816 questions
6
votes
2 answers

How can I access cookie-session from client side?

I am building an application single page using NodeJS, and want to use my cookie session (cookie-session npm) to verify if the user is logged in or not. From my node server side I can get and set the session cookie, but I do not know how to get from…
Zzeks
  • 571
  • 2
  • 5
  • 9
6
votes
1 answer

Security of Token Based Authentication

My understanding of token based authentication is that upon authentication (perhaps over ssl), a token is passed to the user for cheap user verification on the fly. One implementation of this would be to generate a cookie that is passed to the user…
Devin
  • 2,113
  • 2
  • 22
  • 28
6
votes
2 answers

Codeigniter – how to avoid database caching for sessions

I'm developing a website (with a shopping cart) on top of Codeigniter, and want to use the sess_use_database setting to make it more difficult for users to hack a shopping cart session. I also want to use database caching to speed up common DB…
Ade
  • 2,961
  • 4
  • 30
  • 47
6
votes
1 answer

Oracle Weblogic OAM get user information using session cookies

Oracle/WebLogic noob here. I'm not sure if I'm asking the right questions but any and all tips will be greatly appreciated. We are trying to deploy an Angular 4 web application on to an Oracle WebLogic server w Apache HTTP and security managed by…
6
votes
3 answers

Using HttpCookie for timeout/ url expiration

I'm working a web application, which is MVC 5 + Angular JS hybrid. There is no authentication in the web app and an anonymous user can come and ask for price for certain services. To get the price the user needs to answer some questions spread…
Ankit Vijay
  • 3,752
  • 4
  • 30
  • 53
6
votes
0 answers

How to set and verify cookie with a custom domain on heroku?

I'm not even sure that's the right question. I set up ActionCable to open a websocket connection, and it works great on heroku, if it's just the app-name.herokuapp.com But when I try to use the custom domain set up for the app, the connection is not…
gwalshington
  • 1,418
  • 2
  • 30
  • 60
6
votes
5 answers

Session value missing after redirect with django python-social-auth

I am working on a django project using python-social-auth to do authentication with facebook. I am running the django server on localhost and have facebook set up with my application to redirect to http://127.0.0.1:8000/complete/facebook/, which…
6
votes
1 answer

storing session in rails api application

I have a rails api only application [config.api_only = true] in which I enable the cookies through these following lines: in application.rb: config.middleware.insert_after ActionDispatch::ParamsParser,…
Jenny Kim
  • 1,505
  • 2
  • 16
  • 25
6
votes
1 answer

Make ASP.NET cookie secure

I have an application that runs on SSL, I have already added the following into my web.config, under System.Web. But I still get one unsecured cookie by the name of…
progrAmmar
  • 2,606
  • 4
  • 29
  • 58
6
votes
2 answers

How implement 'remember me' in laravel 5.1?

How to implement rememeber me functionality in laravel 5.1? Can anyone give me an example?
Neethu
  • 124
  • 2
  • 2
  • 11
6
votes
1 answer

Store Express Session in Cookie

I have found various ways to store a session ID in a cookie for expressjs. What I actually want is to store all my session data in a cookie and not have to worry about a server-side session store. Why? My session data is tiny and having a session…
Nik
  • 7,113
  • 13
  • 51
  • 80
6
votes
1 answer

How does ASP.NET know to create the ASP.NET_SessionId cookie if Session_Start is defined?

I've done quite a bit of testing on this, and I'm thoroughly confused. It seems ASP.NET will generate an ASP.NET_SessionId cookie if the Session_Start method in the MvcApplication class is defined, even if I'm not using the Session variable…
johnnyRose
  • 7,310
  • 17
  • 40
  • 61
6
votes
0 answers

Issue with setting session cookie http and secure to true

I have a project build on Asp.net MVC 4 and in our application we need to make the session cookie secure. I have tried this code to make my cookie secure. var encryptedTicket =…
Rahul lamba
  • 131
  • 7
6
votes
0 answers

How to use cookies to login to website?

I have logged into a website and saved the respective cookies in a text file. Now I want to login to the same website using :- Command Line utility like wget/curl without user name and password using those cookies. Login into the website via…
Siddharth
  • 2,046
  • 5
  • 26
  • 41
6
votes
2 answers

Google Chrome restores session cookies after a crash, how to avoid?

On Google Chrome (I saw this with version 35 on Windows 8.1, so far I didn't try other versions) when browser crashes (or you simply unplug power cable...) you'll be asked to recover previous session when you'll open it again. Good feature but it…
Adriano Repetti
  • 65,416
  • 20
  • 137
  • 208