Skip to content

Instantly share code, notes, and snippets.

@lemanschik

lemanschik/understand-https-sessions.md

Created October 2, 2023 03:17
Show Gist options
  • Save lemanschik/ec180f99546fad37ec85a51aca79be37 to your computer and use it in GitHub Desktop.
Save lemanschik/ec180f99546fad37ec85a51aca79be37 to your computer and use it in GitHub Desktop.
Download ZIP
Understand http sessions
Raw
understand-https-sessions.md

A Requests gets issued by a browser normaly a HTTP conform client will accept set cookie headers and apply that cookies on the next request

if you need more fine grained controle eg multi session it is clever to attach the cookie content as server query parameters via url?param=xxxx&param=2

the first method logs out via deleting the cookie or replacing it the secund via deletion of browser cache.

to prevent man in the middle you could implement something like a one time factor. something that is only valid once and in a given period.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment