This article explains the evolution from cookies to server‑side sessions and finally to JWT tokens, compares their mechanisms, discusses scalability and security challenges such as CSRF, and provides guidance on when to choose each authentication method.
This guide walks through configuring Spring Boot 2.3.10 with OAuth2 client support, detailing required dependencies, application and security settings, common session‑related errors, step‑by‑step debugging of OAuth2LoginAuthenticationFilter and OAuth2AuthorizationRequestRedirectFilter, and the final solution of aligning hostnames to preserve cookies.
This article analyzes token‑based identity authentication in multi‑client information systems, classifies various token types, compares their natural and controllable attributes, and proposes a hierarchical token architecture that balances security, usability, and lifecycle management across web, mobile, and API scenarios.
This article compiles essential PHP interview questions and answers covering output functions, string handling, error reporting, session vs cookie, GET vs POST, code execution results, URL encoding, character set conversion, array operations, Redis benefits, command‑line usage, crontab syntax, request flow, magic methods, and basic variable types.
The article explains how to perform efficient user retention, funnel, and session analysis on large ClickHouse datasets by replacing costly multi‑table joins with bitmap compression, the built‑in retention function, windowFunnel, and high‑order array functions, providing practical SQL examples and performance insights.
This tutorial walks through creating two Django projects, configuring a shared session store (either a common file or Redis) to achieve single sign‑on across them, and provides full code snippets, settings adjustments, and testing steps to demonstrate seamless login synchronization.
To correctly use the Captcha feature in ThinkPHP6, you must manually enable the framework’s built‑in session support, as it is disabled by default; the Captcha stores its code in the session, and without an active session verification will always fail.
This article demonstrates how to reproduce the session loss problem in a load‑balanced Spring Boot application, explains its cause, and provides a step‑by‑step solution using Redis for shared session storage, including code, Nginx configuration, and deployment instructions.
This article analyzes token-based identity authentication in multi‑client information systems, classifies various token types, compares their natural and controllable attributes, proposes a four‑layer hierarchy, and discusses practical usage scenarios and design principles to improve security and privacy.
This article explains the principles and workflows of typical authentication mechanisms—including HTTP Basic authentication, cookie‑based sessions, JSON Web Tokens, and OAuth—detailing their encryption processes, storage strategies, token refresh techniques, and security considerations for modern web applications.
This article explores what “state” means in the HTTP protocol, clarifies the concepts of statelessness and connection‑lessness, demonstrates their impact through a simulated shopping‑cart scenario, and explains how cookies and sessions introduce state to enable practical web interactions.
This article provides a step‑by‑step guide to implementing login authentication in Spring Boot, covering both session‑based and JWT‑based approaches, including code for controllers, filters, interceptors, context utilities, and best‑practice considerations for secure and scalable backend development.
This article traces the evolution from early stateless web browsing to modern token‑based authentication, explaining how session management challenges led to centralized stores, their drawbacks, and how signed tokens using HMAC‑SHA256 provide a scalable, secure, and truly stateless alternative.
This article explains the fundamentals of cookies and sessions, provides a detailed analysis of the koa-session source code, demonstrates how to configure and use koa-session with in‑memory, Redis, and MySQL stores, and summarizes security considerations and performance trade‑offs.
This article explains the fundamentals of backend architecture, covering Maven's settings.xml, front‑back separation, various types of locks (thread, process, distributed), detailed Redis‑based and Zookeeper‑based distributed lock implementations with code examples, session handling in distributed systems, and key Spring‑Redis caching annotations.
Although HTTP is described as a stateless, connectionless protocol, this article dissects what “state” truly refers to, explains why the protocol lacks memory of client interactions, and demonstrates how mechanisms like cookies, sessions, and server‑side caching introduce stateful behavior to enable features such as login persistence and shopping carts.
The article traces the history of web session handling from simple stateless requests through the challenges of scaling session IDs, explains why token‑based authentication (e.g., JWT) offers a stateless, scalable, and more secure alternative, and outlines its core principles and advantages.
This article analyzes the intermittent “Instance XXX is not bound to a Session” error that occurs after converting a Flask‑SQLAlchemy endpoint from serial to multithreaded/gevent concurrency, reproduces the issue with test code, explains the root cause in session handling, and provides a concrete fix by patching gevent before session initialization.
This article explains the fundamentals of authentication and authorization, the roles of credentials, cookies, sessions, various token types including access and refresh tokens, and details the structure, generation, and usage of JWTs, while comparing security considerations and distributed session sharing strategies.
This tutorial introduces Python’s Requests library, covering installation, core methods like GET, POST, PUT, PATCH, DELETE, detailed parameters, session handling, exception management, header customization, proxy usage, and practical code examples to empower effective web scraping.
The article traces the history of web session handling, explains the scalability and security challenges of server‑side sessions, and introduces stateless token‑based authentication using signed HMAC‑SHA256 tokens as a modern solution for scalable, secure web applications.
This article provides a concise Laravel Redirect cheat sheet that explains how to use the framework's URL redirection helper with session storage, covering basic redirects, redirects with data, back navigation, named routes, controller actions, and intended redirects, accompanied by ready-to-use code examples.
This article explores what “state” means in the HTTP protocol, clarifying the concepts of statelessness, the role of cookies and sessions, and how they address the limitations of pure HTTP through practical examples and security considerations.
This article provides a concise reference of Laravel's Session helper methods, showing how to get, set, check, and manipulate session data with clear code examples for rapid backend development.
The article traces the history of web session handling from simple document browsing to the challenges of storing session IDs in clustered servers, and explains how token‑based authentication using signed tokens like HMAC‑SHA256 provides a stateless, scalable, and more secure alternative for modern web and mobile applications.
This article explains how cookies and sessions compensate for HTTP's stateless nature, details their creation, types, and limitations, compares them with JSON Web Tokens, and provides guidance on choosing the appropriate authentication method for different application scales and security requirements.
The article traces the history of web session handling, explains the drawbacks of server‑side session storage, introduces token‑based authentication with HMAC‑signed JWTs, and highlights the security, scalability and cross‑domain benefits of stateless token mechanisms over traditional cookies and sessions.
This article explores the true meaning of HTTP’s stateless nature, clarifies common misconceptions, examines how cookies and sessions add state, and demonstrates through a simulated shopping scenario why additional mechanisms are needed to maintain user context across requests.
This article analyses various client scenarios in multi‑client systems, classifies authentication tokens into password, session, API, and other categories, compares them across usage cost, change cost, and security risks, and presents a hierarchical token model with detailed usage steps and practical considerations.
This article explains the differences between authentication and authorization, compares session‑based and token‑based (JWT) authentication flows, details JWT structure and signing, and outlines the advantages, disadvantages, and suitable scenarios for each method.
The article outlines typical anti‑crawling measures such as browser detection, captchas, login requirements, JavaScript obfuscation, and behavior‑based blocks, and provides practical counter‑strategies including header spoofing, captcha solving, session/token handling, JS emulation, and human‑like request pacing.
This guide explains how Laravel handles session storage across HTTP requests, covering configuration files, built‑in drivers such as file, cookie, database, Memcached and Redis, custom driver creation, and common session operations like retrieving, storing, flashing, and regenerating IDs, with code examples throughout.
This article explains the fundamental differences between cookies, sessions, and tokens, outlines how each works in web authentication, compares their security and performance trade‑offs, and offers practical guidance on storage, encryption, and best practices for implementing token‑based authentication.
This article explains the stateless nature of HTTP and how cookies, server‑side sessions, and token‑based authentication work together to maintain user state across requests, including their storage limits, lifecycle, and practical implementation steps.
This guide explains what Tmux is, how it separates sessions from windows, and provides step‑by‑step instructions for installing, starting, detaching, attaching, managing sessions, panes, and windows, along with useful shortcut keys and command examples.
The article explains the concept of distributed session consistency, outlines the role and lifecycle of HTTP sessions, describes the challenges of sharing sessions across server clusters, and evaluates several practical solutions including database, cookie, Memcache, and Redis based approaches.
This article explains the origin, purpose, and inner workings of HTTP cookies, details their attributes and security implications, demonstrates how to create, retrieve, and set cookies with Python's requests library, and compares cookies with server‑side sessions for robust web development.
A July 3 CAS extension caused login failures due to inconsistent JSESSIONID handling across servers, leading to redirects and authentication errors, which were traced to missing memory‑cache configuration and resolved by removing the misconfigured node and restoring proper session sharing.
This article provides a thorough overview of HTTP cookies, covering their origin, definition, working principles, attributes, Python manipulation, session comparison, common interview questions, and associated security concerns, all illustrated with examples and code snippets.
This article explains how traditional session‑cookie authentication creates scalability, security, and deployment challenges in front‑end/back‑end separated web applications, and how JSON Web Tokens (JWT) provide a compact, self‑contained, stateless solution while also outlining their advantages and limitations.
This article explains the fundamentals of Single Sign‑On (SSO), compares traditional single‑system login with multi‑system authentication, discusses session and cookie challenges, and provides Java Spring code examples for token‑based SSO using Redis and interceptors.
This article explains what cookies and sessions are, their types and attributes, demonstrates how they control language preferences on a website, and provides practical iOS examples using NSHTTPCookie, AFNetworking, and NSURLSession to send and manage cookies in network requests.
This article explains why Hibernate is used, defines ORM, shows how to view SQL logs, describes HQL/SQL/Criteria queries with code examples, discusses entity class design, caching layers, object states, session handling methods, and the requirement for a no‑argument constructor.
This article explains the differences between JSP and Servlets, lists JSP built‑in objects and scopes, compares Session and Cookie mechanisms, describes session operation and alternatives when cookies are disabled, contrasts Spring MVC with Struts, and outlines common web security measures such as preventing SQL injection, XSS, and CSRF attacks.
This article explains the concept of web sessions, the consistency challenges that arise in distributed server clusters, and evaluates four common solutions—session replication, session affinity, cookie‑based sessions, and dedicated session servers—detailing their use cases, advantages, and drawbacks.
This article explains JWT fundamentals—encoding, signature, and encryption—examines suitable use‑cases such as one‑time verification and stateless API authentication, discusses token leakage, secret design, logout handling, renewal strategies, and compares JWT with traditional session and OAuth2 approaches.
This guide explains the session‑sharing problem caused by load balancing, introduces Redis as a shared storage solution, and provides step‑by‑step instructions—including php.ini changes, runtime ini_set calls, and a custom session‑handler class—to configure PHP to store sessions in Redis, with code examples and verification commands.
Redis, a powerful in‑memory data store, offers versatile capabilities beyond simple key‑value storage, and this article explores five common real‑world scenarios—full‑page caching, leaderboards, session storage, queues, and pub/sub—demonstrating how to leverage its rich data structures for faster, more reliable applications.
This article explains HTTP's stateless nature, how cookies and server‑side sessions try to overcome it, the challenges of session sharing in clustered environments, and why JSON Web Tokens (JWT) provide a lightweight, secure, and scalable alternative for modern authentication.
This article explains the fundamentals of HTTP Session and Cookie mechanisms in Java web applications, provides a minimal Spring Boot controller example that stores and retrieves a browser identifier via session, demonstrates behavior across Chrome and 360 browsers, and highlights the security risk of tampering with the JSESSIONID cookie.
This article explains what HTTP cookies are, their historical origin, how they are created and managed via Set-Cookie headers, the meaning of options like expires, domain, path, and secure, as well as JavaScript handling, subcookies, HTTP‑Only flags, and common limitations.
The article examines how to build and scale large web sites by combining technical and business considerations, covering static site deployment, multi‑server availability, session synchronization methods, load‑balancing techniques, database read/write separation, caching, and search indexing to handle high concurrency and data growth.
