session cookie
A session cookie carries a session credential in browser requests.
Use this when A web application maintains a signed-in browser session.
without the term
“When users log out, if someone copied their cookie it still works. And I'm not sure our cookie settings are right. Can you make sessions secure?”
with the term · How do you ask a model for session cookie?
Harden this session cookie and lifecycle. Test login rotation, expiry, logout invalidation, and the intended cross-site behavior.
What is session cookie?
The browser sends the session cookie with every request. Secure, HttpOnly, and SameSite limit how it travels, and the server limits how long it lasts and revokes it on logout.
Why does session cookie matter when vibe coding?
A working login can leave stolen or logged-out sessions usable.
How do you do session cookie?
Use appropriate Secure, HttpOnly, and SameSite settings; define expiry, rotation, and invalidation.
What goes wrong with session cookie?
Believing HttpOnly prevents an injected script from acting through the victim’s session.