Questions tagged [session-cookies]

Session cookies enable a server and a browser to establish an identified connection (through cookies) and communicate though it.

Session cookies are temporary files that exist for a particular user for a pre-defined duration. Once this duration is expired, the session cookies are erased.

Session cookies allow a website to keep a state or memory of the visitor as they navigate between pages of the website.

4816 questions
12
votes
1 answer

Lifecycle of a session cookie in an Android WebView / CookieSyncManager

I have an Android application which makes requests to my webserver via both a WebView and an HttpClient. I sync cookies between the two using a CookieSyncManager. So far, so good. When my application starts (inside onResume()), I run a piece of…
gnmerritt
  • 566
  • 1
  • 6
  • 14
12
votes
3 answers

MVC4 / IIS / Forms Authentication SSO issue

I’ve got a weird intermittent issue with MVC4 / IIS / Forms Authentication. I’ve got a pair of sites that pass control to each other using SSO. Most of the time the handover occurs correctly and the user is redirected to the next site as intended.…
12
votes
3 answers

Set "secure" flag on session cookie in RoR even over HTTP

In a Rails app, the session cookie can be easily set to include the secure cookie attribute, when sending over HTTPS to ensure that the cookie is not leaked over a non-HTTP connection. However, if the Rails app is NOT using HTTPS, but HTTP only,…
AviD
  • 12,944
  • 7
  • 61
  • 91
11
votes
3 answers

How does a web beacon(web bug) work?

Can anybody explain exactly how a web beacon works? I know they're generally used by advertising platforms but i can't really find a good explanation on how they're working. I know that cookies aren't accessible cross-domain. A web beacon is an…
Dan Dinu
  • 32,492
  • 24
  • 78
  • 114
11
votes
4 answers

Session Cookie never set in asp.net core

I am trying to configure sessions for an asp.net core 2.0 website, but the session cookie is never set. I call .. app.UseSession(); ...in Startup.Configure and ... services.AddDistributedMemoryCache(); services.AddSession(options…
Preli
  • 2,953
  • 10
  • 37
  • 50
11
votes
3 answers

How to set expiration date to client cookies?

I configured Identity Server: public void Configuration(IAppBuilder app) { var factory = new IdentityServerServiceFactory().UseInMemoryClients(new Client[] { new Client() { ClientName = "MyClient", …
Artem
  • 1,773
  • 12
  • 30
11
votes
1 answer

Enable session cookies for iframe in page in WkWebView / mobile Safari

I have a website that is iframed into a 3rd party webpage, which is itself embedded in a WkWebView in an iOS app. Mobile Safari and the WkWebView reject the session (http-only) cookies being sent for my website, breaking basically everything. The…
asgallant
  • 26,060
  • 6
  • 72
  • 87
11
votes
3 answers

Can we read browser saved cookies from a java desktop application?

I want to transfer web login session to my java desktop application ,so that once again I don't want to login in my desktop application. Once the user logs into my web application, I set some cookies on the user system, once he starts my standalone…
Handroid
  • 399
  • 1
  • 2
  • 13
11
votes
2 answers

how to use python to login page which requires session id responded by server on first request?

I am writing a script to log in to some webpage. I using request and request.session module for this purpose.On first request with login parameters server responses a session id.How to set that session id for further login to same page. url = "some…
rushikesh
  • 171
  • 1
  • 2
  • 14
11
votes
3 answers

Access session across subdomains (Rails 4)

Hi i have a multitenant rails 4 application that has a simple sign in solution. However each user has a subdomain that the user gets redirected to after login. The problem is that as they arrive at the subdomain they are not logged in anymore due…
Ole Henrik Skogstrøm
  • 6,353
  • 10
  • 57
  • 89
11
votes
3 answers

Is it possible for jQuery cookies to expire like session variables?

I know this question has been asked a thousand times but none of the answers really give me what I'm looking for. I am using jQuery cookie to store some information, but I want them to expire when the browser closes. window.unload is not a viable…
Adam K Dean
  • 7,387
  • 10
  • 47
  • 68
11
votes
2 answers

Share session/cookie between subdomains for Play 2.X

I only can find Play 1.x has this setting. How to set this in Play 2.X? http://www.playframework.org/documentation/1.2.4/configuration application.defaultCookieDomain Enables session/cookie sharing between subdomains. For example, to make cookies…
angelokh
  • 9,426
  • 9
  • 69
  • 139
11
votes
2 answers

JAX-WS client: maintain session/cookies across multiple services

I'm using Netbeans to automatically create webservice clients based off WSDL files. This works well, except the webservices I'm using require that I pass in a custom cookie in the HTTP header to every webservice in order to prove my identity. I use…
bradvido
  • 2,743
  • 7
  • 32
  • 49
11
votes
5 answers

Django session expires at browser close OR after time

The Django documentation states: You can control whether the session framework uses browser-length sessions vs. persistent sessions with the SESSION_EXPIRE_AT_BROWSER_CLOSE setting. If SESSION_EXPIRE_AT_BROWSER_CLOSE is set to True, Django will…
nucklehedd
  • 301
  • 1
  • 3
  • 11
11
votes
6 answers

Reason to rename ASP.NET Session Cookie Name?

is there any reason (safety?) why someone should rename the ASP.NET Session Cookie Name or is it just a senseless option of ASP.NET?
Alex
  • 75,813
  • 86
  • 255
  • 348