Session Management & Cookies

24 lessons in Authentication & Authorization

• Session Timeout: Idle vs AbsoluteFlashcard
• CSRF and Cookie-Based SessionsFlashcard
• Secure Session ID GenerationFlashcard
• Session Fixation AttackFlashcard
• Cookies vs LocalStorage for SessionsFlashcard
• Secure AttributeFlashcard
• Session ID RegenerationFlashcard
• Session HijackingFlashcard
• SameSite AttributeFlashcard
• Session Invalidation and LogoutFlashcard
• Signed and Encrypted CookiesFlashcard
• Set-Cookie and Cookie HeadersFlashcard
• Cookie StructureFlashcard
• Expires and Max-Age AttributesFlashcard
• Session vs Persistent CookiesFlashcard
• Domain and Path AttributesFlashcard
• Stateful vs Stateless SessionsFlashcard
• Session LifecycleFlashcard
• Server-Side vs Client-Side StorageFlashcard
• Session ID and User IdentificationFlashcard
• HttpOnly AttributeFlashcard
• What is Session ManagementFlashcard
• What is an HTTP CookieFlashcard
• How Cookies Enable StatefulnessFlashcard