A mechanism for maintaining and managing login state over a period of time.
A mechanism that maintains post-authentication state, either server-side or via a token. Protecting against session ID leakage is important. The older practice of putting the session ID in the URL leaks easily, for example when browsing history gets shared, so managing it through a cookie with the HttpOnly and Secure attributes set is now the standard approach.
© 2026 ITBGM