Why should I use session id in cookie instead of storing login and (hashed) password in cookie?

后端 未结 3 1849
清酒与你
清酒与你 2021-02-05 23:43

(I was surprised that this question wasn\'t asked on Stack for now, but I\'ve done some searching and couldn\'t find anything o.O)

I am working on service-based webapp a

3条回答
  •  离开以前
    2021-02-06 00:23

    By storing a session ID you can identify different sessions of the same user, and you may want to handle them in any special way (e.g. just allow a single session, or have data that's associated with the session instead of to the user).

    And you can distinguish easly activity from different sessions, so you can kill a session without having to change your password if you left it open in a computer, and the other sessions won't notice a difference.

提交回复
热议问题