BestHub
Sign in
Tagged articles

Cookie

68 articles · Page 1 of 1
Architect's Guide
Architect's Guide
Jun 27, 2026 · Information Security

A Comprehensive Guide to Front‑End and Back‑End Authentication Strategies

This article systematically explains ten common authentication approaches—from basic HTTP authentication and session‑cookie mechanisms to token, JWT, SSO, OAuth 2.0, QR‑code login, and one‑click login—detailing their principles, workflows, advantages, drawbacks, and typical usage scenarios with concrete examples and code snippets.

CookieJWTOAuth2.0
0 likes · 42 min read
A Comprehensive Guide to Front‑End and Back‑End Authentication Strategies
Java Architect Handbook
Java Architect Handbook
Mar 16, 2026 · Backend Development

Cookie vs Session vs Token: Master Java Authentication for Interviews

This guide outlines interview focus points, core definitions, and deep analysis of Cookie, Session, and Token (JWT), compares their storage, security, scalability, and cross‑origin support, and provides high‑frequency follow‑up questions, common variants, memory mnemonics, and selection principles for Java authentication.

CookieJWTJava
0 likes · 15 min read
Cookie vs Session vs Token: Master Java Authentication for Interviews
Su San Talks Tech
Su San Talks Tech
Aug 23, 2025 · Information Security

Cookie, Session, Token, JWT, OAuth2: Which One Fits Your Project?

This article demystifies the differences between Cookie, Session, Token, JWT, and OAuth2, explains their underlying mechanisms, shows practical Spring code examples, compares their security properties and suitable scenarios, and provides clear guidance on choosing the right authentication strategy for modern web applications.

CookieJWTSession
0 likes · 13 min read
Cookie, Session, Token, JWT, OAuth2: Which One Fits Your Project?
Top Architecture Tech Stack
Top Architecture Tech Stack
May 15, 2025 · Backend Development

Understanding Cookie + Session Mechanism and Distributed Session Sharing Solutions

This article explains the Cookie + Session mechanism for maintaining user state, discusses its limitations such as size, performance and security, examines challenges in distributed environments, and reviews common solutions including session replication, sticky load balancing, centralized storage, and the use of ThreadLocal for small‑scale backend applications.

CookieSessionWeb Development
0 likes · 17 min read
Understanding Cookie + Session Mechanism and Distributed Session Sharing Solutions
php Courses
php Courses
Dec 27, 2024 · Backend Development

Using PHP's setcookie Function to Create and Manage Cookies

This article explains the PHP setcookie function, detailing its syntax, parameters, and practical examples for setting cookies with various attributes such as expiration time, path, domain, security, and HttpOnly flags.

Cookiebackendsetcookie
0 likes · 4 min read
Using PHP's setcookie Function to Create and Manage Cookies
Architect's Guide
Architect's Guide
Sep 18, 2024 · Backend Development

Understanding Cookie+Session, Distributed Session Sharing, and ThreadLocal for Maintaining User Login State

This article explains the limitations of traditional Cookie+Session authentication, explores distributed session sharing techniques such as replication, sticky sessions, and centralized storage, and demonstrates why using ThreadLocal can simplify user state management in a web application like the Echo project.

Cookiebackendsession management
0 likes · 9 min read
Understanding Cookie+Session, Distributed Session Sharing, and ThreadLocal for Maintaining User Login State
php Courses
php Courses
Jan 31, 2024 · Information Security

How to Defend Against CSRF Attacks in PHP

This article explains the principles of CSRF attacks and provides practical PHP techniques to prevent them, including token generation and verification, checking Referer and Origin headers, configuring secure cookie attributes, and ensuring safe login and logout processes.

CSRFCookieOrigin
0 likes · 5 min read
How to Defend Against CSRF Attacks in PHP
JD Tech
JD Tech
Jun 8, 2023 · Operations

Extending Cookie Lifetime for Seamless UI and API Automation

This article presents a practical solution to overcome login obstacles in UI and HTTP API automation by converting short‑lived cookies into permanent ones through a micro‑service, enabling continuous end‑to‑end automated testing without manual re‑login.

CookieUI testingmicroservice
0 likes · 8 min read
Extending Cookie Lifetime for Seamless UI and API Automation
Open Source Linux
Open Source Linux
Mar 27, 2023 · Information Security

How a 23.9‑Year‑Old Curl Bug Exposed Critical Cookie Security Flaws

An in‑depth look at the decades‑long curl vulnerability discovered by Daniel Stenberg, tracing its origins in early cookie handling, the dual‑syntax challenges of RFC 6265, the 2022 security report, and the eventual fix that finally closed a 23.9‑year‑old bug.

CVE-2022-35252CookieHTTP
0 likes · 10 min read
How a 23.9‑Year‑Old Curl Bug Exposed Critical Cookie Security Flaws
MaGe Linux Operations
MaGe Linux Operations
Mar 19, 2023 · Information Security

How a 23‑Year‑Old Curl Bug Exposed Cookie Security Flaws

The article recounts the 23.9‑year‑long curl vulnerability discovered by Daniel Stenberg, detailing the early implementation of cookie handling, the challenges of dual cookie syntax, the security bug involving control‑code cookies, and the eventual fix released after nearly nine thousand days.

CVECookieHTTP
0 likes · 10 min read
How a 23‑Year‑Old Curl Bug Exposed Cookie Security Flaws
Open Source Linux
Open Source Linux
Oct 23, 2022 · Information Security

How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022

This article recounts the 23.9‑year lifespan of a curl cookie handling vulnerability, tracing its origins in 1998, the evolution of cookie specifications, the discovery of the CVE‑2022‑35252 bug, and the eventual fix that finally eliminated the flaw after nearly 9,000 days.

CVECookieHTTP
0 likes · 9 min read
How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022
Liangxu Linux
Liangxu Linux
Oct 20, 2022 · Information Security

Why a 23‑Year‑Old curl Cookie Bug Went Unnoticed Until 2022

The article recounts how a flaw introduced in curl 4.9's cookie engine in 1998 persisted for 23.9 years, why the dual‑syntax cookie RFC caused confusion, how the bug allowed control‑character cookies to be sent, and how a simple reject‑bytes patch finally fixed CVE‑2022‑35252.

CVE-2022-35252CookieHTTP
0 likes · 10 min read
Why a 23‑Year‑Old curl Cookie Bug Went Unnoticed Until 2022
MaGe Linux Operations
MaGe Linux Operations
Oct 18, 2022 · Information Security

How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022

The article recounts the 23.9‑year‑long history of a curl cookie handling vulnerability, explains how ambiguous cookie specifications caused a dual‑syntax challenge, describes the CVE‑2022‑35252 bug and its simple fix, and reflects on the broader implications for HTTP security.

CVECookieHTTP
0 likes · 9 min read
How a 23‑Year‑Old Curl Cookie Bug Evaded Detection Until 2022
Laravel Tech Community
Laravel Tech Community
Aug 25, 2022 · Backend Development

Encapsulating Cookie and Session Operations in PHP

This tutorial shows how to create reusable PHP functions for reading, writing, and managing cookies and session data, including helper utilities to streamline backend web development by abstracting common operations and handling expiration, paths, and nested session keys.

CookieSessionweb-development
0 likes · 4 min read
Encapsulating Cookie and Session Operations in PHP
Su San Talks Tech
Su San Talks Tech
Mar 8, 2022 · Information Security

Cookie vs Session vs JWT: Choosing the Right Authentication Strategy

This article compares cookies, server-side sessions, and JWT tokens, explaining their mechanisms, advantages, drawbacks, and best-use scenarios for web authentication, load‑balanced environments, and mobile applications, while also addressing security concerns such as CSRF and token storage.

CookieSessionToken
0 likes · 15 min read
Cookie vs Session vs JWT: Choosing the Right Authentication Strategy
Architecture and Beyond
Architecture and Beyond
Jan 17, 2022 · Information Security

Understanding Web Session Management: Concepts, Storage Strategies, and Token‑Based Authentication

This article explains the fundamentals of web session management, compares server‑side, cookie‑based, and token‑based storage methods, discusses authentication versus authorization, and outlines security considerations and best‑practice recommendations for managing user sessions in modern web applications.

AuthorizationCookieToken
0 likes · 11 min read
Understanding Web Session Management: Concepts, Storage Strategies, and Token‑Based Authentication
Top Architect
Top Architect
Jan 16, 2022 · Information Security

Understanding Authentication, Authorization, Sessions, Cookies, Tokens and JWT

This article explains the concepts of authentication and authorization, the role of credentials, the differences between cookies and sessions, various session‑sharing strategies, token‑based authentication including JWT, common security algorithms and practical considerations for implementing secure access control in web applications.

CookieSession
0 likes · 35 min read
Understanding Authentication, Authorization, Sessions, Cookies, Tokens and JWT
Programmer DD
Programmer DD
Oct 28, 2021 · Frontend Development

Which Browser Storage Is Best for JWT? Cookie vs localStorage vs sessionStorage

This article compares three browser storage options for JWT—Cookie, localStorage, and sessionStorage—examining how each works, their automatic handling, and security implications such as CSRF and XSS, ultimately recommending Cookies with proper SameSite and HttpOnly settings for stronger protection.

CSRFCookieJWT
0 likes · 4 min read
Which Browser Storage Is Best for JWT? Cookie vs localStorage vs sessionStorage
Sohu Tech Products
Sohu Tech Products
Oct 20, 2021 · Mobile Development

Comprehensive Guide to WKWebView: Migration, Performance, Delegates, Caching, and Cookie Management

This article explains why UIWebView was deprecated, how WKWebView improves performance and memory usage, details its multi‑process architecture, outlines page loading flow, delegate methods, container design, caching strategies, cookie handling across processes, and solutions for white‑screen crashes in iOS apps.

CachingCookieWKWebView
0 likes · 22 min read
Comprehensive Guide to WKWebView: Migration, Performance, Delegates, Caching, and Cookie Management
Java Architect Essentials
Java Architect Essentials
Oct 8, 2021 · Information Security

Understanding Authentication, Authorization, and Tokens: From Cookies to JWT

This article explains the fundamentals of authentication, authorization, and credentials, compares cookies, sessions, and tokens, details token types such as access and refresh tokens, introduces JWT principles and usage, and discusses security considerations and distributed session‑sharing strategies for modern web applications.

AuthorizationCookieJWT
0 likes · 22 min read
Understanding Authentication, Authorization, and Tokens: From Cookies to JWT
Top Architect
Top Architect
Jul 3, 2021 · Backend Development

Three Practical Methods for Implementing Single Sign-On (SSO) in B/S Systems

This article explains the principle of single sign‑on and compares three implementation techniques—parent‑domain cookies, a dedicated authentication centre, and cross‑domain LocalStorage—detailing their mechanisms, advantages, limitations, and providing sample code for the LocalStorage approach.

CookieSSOToken
0 likes · 11 min read
Three Practical Methods for Implementing Single Sign-On (SSO) in B/S Systems
macrozheng
macrozheng
May 31, 2021 · Information Security

Cookie vs Session vs JWT: When to Use Each for Secure Authentication

This article compares the mechanisms of Cookie, Session, and JWT token for user authentication, explaining their histories, workflows, scalability challenges, security trade‑offs, and best‑practice scenarios such as single sign‑on, mobile access, and CSRF protection.

CookieSessionToken
0 likes · 16 min read
Cookie vs Session vs JWT: When to Use Each for Secure Authentication
21CTO
21CTO
Jan 18, 2021 · Backend Development

Mastering Single Sign-On: Cookie, Auth Center, and LocalStorage Strategies

This article explains three practical Single Sign‑On implementations—parent‑domain cookies, a dedicated authentication center, and cross‑domain LocalStorage—detailing their mechanisms, advantages, limitations, and code examples for secure token sharing across multiple web applications.

CookieSSOToken
0 likes · 11 min read
Mastering Single Sign-On: Cookie, Auth Center, and LocalStorage Strategies
IT Xianyu
IT Xianyu
Nov 25, 2020 · Backend Development

Implementing Single Sign-On (SSO) in B/S Systems: Cookie, Authentication Center, and LocalStorage Approaches

This article explains three practical SSO implementation methods—using a parent‑domain cookie, deploying an authentication center, and leveraging LocalStorage with iframe/postMessage—to share session IDs or tokens across multiple web applications, discussing their advantages, limitations, and code examples.

Authentication CenterCookieJavaScript
0 likes · 10 min read
Implementing Single Sign-On (SSO) in B/S Systems: Cookie, Authentication Center, and LocalStorage Approaches
Selected Java Interview Questions
Selected Java Interview Questions
Sep 23, 2020 · Backend Development

Implementing Single Sign-On (SSO) in Web Applications: Cookie, Authentication Center, and LocalStorage Approaches

This article explains three practical methods for achieving Single Sign‑On in web systems—using a parent‑domain cookie, deploying a dedicated authentication center, and leveraging front‑end LocalStorage with iframe postMessage—to share session or token information across multiple domains.

CookieSSOToken
0 likes · 11 min read
Implementing Single Sign-On (SSO) in Web Applications: Cookie, Authentication Center, and LocalStorage Approaches
Java Captain
Java Captain
Jul 26, 2020 · Information Security

Understanding Authentication, Authorization, Cookies, Sessions, Tokens and JWT

This article explains the fundamentals of authentication and authorization, the roles of credentials, cookies, sessions, various token types including access and refresh tokens, and details the structure, generation, and usage of JWTs, while comparing security considerations and distributed session sharing strategies.

AuthorizationCookieJWT
0 likes · 21 min read
Understanding Authentication, Authorization, Cookies, Sessions, Tokens and JWT
Programmer DD
Programmer DD
Jun 18, 2020 · Backend Development

Why Closing the Browser Doesn’t End Your Java Session – HttpSession and Cookie Sharing Across Ports

This article explores the inner workings of Java HttpSession in Tomcat, explains how sessions are stored in a thread‑safe map, examines the relationship between sessions and cookies, and investigates why browsers share cookies across different ports on the same host, leading to unexpected session behavior.

CookieHttpSessionJava
0 likes · 13 min read
Why Closing the Browser Doesn’t End Your Java Session – HttpSession and Cookie Sharing Across Ports
Laravel Tech Community
Laravel Tech Community
Apr 21, 2020 · Backend Development

Laravel Cookie Helper Cheat Sheet

This cheat sheet provides a concise reference for Laravel's Cookie helper functions, showing how to retrieve, create, queue, and delete cookies, as well as how to send cookies with responses and configure unencrypted cookies, complete with ready-to-use code examples.

CookieHelperLaravel
0 likes · 2 min read
Laravel Cookie Helper Cheat Sheet
WecTeam
WecTeam
Jan 2, 2020 · Frontend Development

How to Simulate Browser Cookies in WeChat Mini Programs: A Complete Guide

This article explains why WeChat Mini Programs need a custom cookie solution, details the browser cookie model, and provides a step‑by‑step implementation using the Mini Program Storage and Network APIs, including code samples, performance tips, testing, and security considerations.

CookieJavaScriptStorage API
0 likes · 14 min read
How to Simulate Browser Cookies in WeChat Mini Programs: A Complete Guide
Programmer DD
Programmer DD
Nov 26, 2019 · Information Security

Understanding Cookies, Sessions, and Tokens: When and How to Use Each

This article explains the fundamental differences between cookies, sessions, and tokens, outlines how each works in web authentication, compares their security and performance trade‑offs, and offers practical guidance on storage, encryption, and best practices for implementing token‑based authentication.

CookieSessionToken
0 likes · 13 min read
Understanding Cookies, Sessions, and Tokens: When and How to Use Each
FunTester
FunTester
Aug 19, 2019 · Backend Development

Simulating Multiple Simultaneous Logins with Apache HttpClient

This guide shows how to disable HttpClient's automatic cookie handling, manually extract and store Set‑Cookie headers, and bind cookies to individual user objects so that multi‑user, multi‑threaded API tests can simulate concurrent logins reliably.

API testingCookieHttpClient
0 likes · 7 min read
Simulating Multiple Simultaneous Logins with Apache HttpClient
Java Captain
Java Captain
Mar 17, 2019 · Backend Development

JSP vs Servlet, Built‑in Objects, Scopes, Session vs Cookie, Spring MVC vs Struts, and Web Security Practices

This article explains the differences between JSP and Servlets, lists JSP built‑in objects and scopes, compares Session and Cookie mechanisms, describes session operation and alternatives when cookies are disabled, contrasts Spring MVC with Struts, and outlines common web security measures such as preventing SQL injection, XSS, and CSRF attacks.

CookieJSPServlet
0 likes · 15 min read
JSP vs Servlet, Built‑in Objects, Scopes, Session vs Cookie, Spring MVC vs Struts, and Web Security Practices
360 Tech Engineering
360 Tech Engineering
Nov 23, 2018 · Frontend Development

Automating Login and Cookie Management with WebDriver to Save Topology Data

This article demonstrates how to use WebDriver (Selenium) to automate login, capture and reuse cookies, and programmatically interact with a topology page to save node coordinates, providing step‑by‑step code examples for initializing drivers, handling authentication, setting cookies, and iterating over multiple pages.

CookieSeleniumWebDriver
0 likes · 9 min read
Automating Login and Cookie Management with WebDriver to Save Topology Data
Java Backend Technology
Java Backend Technology
May 13, 2018 · Information Security

Why HTTP Is Insecure and How to Defend Against Common Web Attacks

This article explains why plain‑HTTP traffic is vulnerable, outlines encryption tricks, describes file‑path traversal, DNS spoofing, proxy risks, HTTP error codes, POST data formats, cookie security, CSRF, XSS, JSONP, and CORS, and provides practical mitigation techniques for each threat.

CORSCSRFCookie
0 likes · 17 min read
Why HTTP Is Insecure and How to Defend Against Common Web Attacks
Java Captain
Java Captain
Apr 18, 2018 · Backend Development

Java Shopping Cart Implementation Using Cookies, Redis, and Spring MVC

This article explains how to implement a shopping cart in Java by handling four login scenarios, defining BuyerCart and BuyerItem beans, using JavaScript and Spring MVC controllers to add items, persisting cart data in cookies or Redis, converting objects to JSON with ObjectMapper, managing sessions, and validating stock before checkout.

Backend DevelopmentCookieJava
0 likes · 17 min read
Java Shopping Cart Implementation Using Cookies, Redis, and Spring MVC
Programmer DD
Programmer DD
Apr 18, 2018 · Information Security

Mastering JWT-Based User Authentication: An 8‑Step Guide

This article walks through an eight‑step JWT authentication flow, explaining how to securely transmit user IDs via cookies, verify tokens on each request, compare JWT with traditional session storage, and configure domain‑wide cookies for single sign‑on across subdomains.

CookieJWTSingle Sign-On
0 likes · 7 min read
Mastering JWT-Based User Authentication: An 8‑Step Guide
Programmer DD
Programmer DD
Sep 11, 2017 · Backend Development

Understanding Java Session and Cookie: A Hands‑On Spring Boot Demo

This article explains the fundamentals of HTTP Session and Cookie mechanisms in Java web applications, provides a minimal Spring Boot controller example that stores and retrieves a browser identifier via session, demonstrates behavior across Chrome and 360 browsers, and highlights the security risk of tampering with the JSESSIONID cookie.

CookieJavaSession
0 likes · 8 min read
Understanding Java Session and Cookie: A Hands‑On Spring Boot Demo
Hujiang Technology
Hujiang Technology
Jul 20, 2017 · Mobile Development

Understanding WKWebView: Comparison with UIWebView, Usage, Issues, and Solutions

This article introduces WKWebView, compares it with the legacy UIWebView in terms of performance and memory usage, explains usage patterns, delegate protocols, JavaScript‑Native interaction, common pitfalls such as cookie handling, process crashes, caching, and offers practical solutions and best‑practice recommendations for iOS developers.

CookieJavaScriptNative
0 likes · 18 min read
Understanding WKWebView: Comparison with UIWebView, Usage, Issues, and Solutions
ITPUB
ITPUB
May 31, 2016 · Backend Development

How to Keep User Sessions Consistent Across Load‑Balanced Servers

This article explains why adding a load balancer can break session continuity, compares sticky sessions, session replication, centralized stores, and cookie‑based approaches, and outlines the advantages and drawbacks of each method for maintaining reliable user sessions in a server cluster.

Cookiesession managementsession replication
0 likes · 8 min read
How to Keep User Sessions Consistent Across Load‑Balanced Servers
21CTO
21CTO
Oct 28, 2015 · Information Security

How Single Sign-On Works: Trust Storage, Validation, and Secure Implementation

This article explains the concept of Single Sign-On (SSO), why it’s essential for large web platforms, the core steps of storing and validating trust, common cookie‑based approaches, their security drawbacks, and how server‑side solutions using distributed caches and digital signatures can provide a robust, cross‑domain authentication system.

CookieSSOSingle Sign-On
0 likes · 5 min read
How Single Sign-On Works: Trust Storage, Validation, and Secure Implementation