Questions tagged [session-cookies]

Session cookies enable a server and a browser to establish an identified connection (through cookies) and communicate though it.

Session cookies are temporary files that exist for a particular user for a pre-defined duration. Once this duration is expired, the session cookies are erased.

Session cookies allow a website to keep a state or memory of the visitor as they navigate between pages of the website.

4816 questions
14
votes
1 answer

Can't get Express session ID from cookies w/ Socket.IO

I have a typical web application in Node that is utilizing the Express framework and the session middleware. I am also using Socket.io for certain dynamic parts of my application (currently, this is a chat mechanism, but that's tangential). I've…
DuxPrime
  • 422
  • 7
  • 16
13
votes
1 answer

Apollo 2.0.0 Graphql cookie session

Can someone help me on this, My setup was as follows prior to Apollo 2.0, I had a server.js in which i used express and graphql-server-express I had a http only cookie session, when a user logs in I set the jwt token as a cookie and it is set in…
NUS
  • 383
  • 1
  • 6
  • 17
13
votes
2 answers

What are the advantages of tracking-mode SSL vs. COOKIE?

I am creating a JSF application deployed in Tomcat/EE (with CLIENTCERTs). By default, the jsessionid (generated with a SecureRandom, so it looks safe) was set in the URL, which I disabled for security reasons by changing the SessionTrackingMode. Now…
user1156544
  • 1,725
  • 2
  • 25
  • 51
13
votes
1 answer

Debugging Random Invalid Authenticity Token Errors

Our production server has been producing invalid authenticity token errors for several months now. The errors are produced on almost all forms sending (PUT|POST|DELETE) requests. Sometimes the error occurs, sometimes they don't. There appears to be…
13
votes
5 answers

How to keep extending session life when user is active?

Let's say there's a site/system with a logged in member area, and users are rarely, but very inconveniently logged out while working with the site/system. It's doubtfully session expiring, since the user was not idle for very long. And even if they…
donk
  • 1,540
  • 4
  • 23
  • 46
12
votes
3 answers

What happens if cookies are disabled?

Pretty basic question here. In PHP, if the user's browser has cookies disabled, you cannot make use of both server cookies ($_SESSION) AND client cookies ($_COOKIE, setcookie) or only the latter are disabled? Basically you can't make the user log in…
federico-t
  • 12,014
  • 19
  • 67
  • 111
12
votes
1 answer

Tomcat 7 - JSESSIONID cookie is not accessible from JavaScript code

Does anyone know what changed in the configuration between Tomcat 6 and Tomcat 7 that would cause the JSESSIONID cookie to not be accessible via JavaScript? Using Tomcat 6: alert(document.cookie); // JSESSIONID=8675309ABCDEF... Using Tomcat…
Jeff R.
  • 371
  • 1
  • 3
  • 9
12
votes
2 answers

Using a session cookie from selenium in urllib2

I'm trying to use Selenium to log into a website and then use urllib2 to make RESTy requests. In order for it to work though, I need urllib2 to be able to use the same session Selenium used. The logging in with selenium worked great and I can…
Jachin
  • 2,025
  • 2
  • 19
  • 26
12
votes
1 answer

MVC3 and Authentication

Ok, I'm new to web development, so I might be getting some of these terms wrong. I apologize in advance. I am having trouble understanding the different elements of authentication. Every method seems to be advised against by someone, though not…
Kyeotic
  • 19,697
  • 10
  • 71
  • 128
12
votes
0 answers

Safari 13.1 is blocking third party cookies

I have an iframe that is embedded on external websites. That iframe performs some actions that require to record some cookies, one of them is login the user on the iframe source website. I basically followed this:…
Pablo Gonzaga
  • 391
  • 1
  • 12
12
votes
3 answers

How do you view session cookies in Internet Explorer?

I am able to see session cookies in Firefox 3.6 by going to Tools->Options->Privacy->Remove Individual Cookies How do I see those same session cookies in IE (6/7/8)? Tools->Internet Options->Browsing history Settings->View files only contains…
treaint
  • 699
  • 1
  • 8
  • 13
12
votes
2 answers

Selenium: Point towards default Chrome session

Though I realize it's NOT "good" practice - I have a use case where I need to point (hook up) the Selenium driver to my default Chrome session/profile. My default profile is here: ~/Library/Caches/Google/Chrome/Default Here is how I'm seting it up…
etayluz
  • 15,920
  • 23
  • 106
  • 151
12
votes
4 answers

How to set Secure attribute to Set-cookie in Nginx through nginx.conf file

I am new to Nginx server. recently started working nginx project. I have task to set security headers through nginx.conf file. I set some header correctly but not able to set for Set-cookie. My requirement is, in response header Set-Cookie should…
12
votes
1 answer

Is it possible to set session cookie path in Google App Engine?

I'm looking for something that can be done like this setting in Tomcat: ...
Kumar
  • 1,023
  • 1
  • 10
  • 23
12
votes
3 answers

Cookie expires or session timeout too soon

I have code like this which is run when a user is authorized: FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket( 1, email, DateTime.Now, …
raklos
  • 28,027
  • 60
  • 183
  • 301