Timeline for Is session/cookie based authentication stateful or stateless?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 11, 2020 at 17:49 | comment | added | Tim | Sorry. I stay confused. security.stackexchange.com/questions/225723/… | |
| Feb 11, 2020 at 17:20 | comment | added | Tim | (1) my typo. Is token based authentication stateless? If yes, is it because every request is required to authenticate? | |
| Feb 11, 2020 at 17:12 | comment | added | Steffen Ullrich | @Tim: (1) no. (2) cookie can be used for many things where it is relevant that some information set by the server is stored by the client and reflected back later to the server. But a scenario where the client sends credentials with each request is not cookie based. (3) it does not matter where the token is stored but only if it is associated with a state or not. - also, please stick to your original question and don't add more and more follow-ups as comment. | |
| Feb 11, 2020 at 17:11 | comment | added | Tim | (3) when tokens are written in cookies, it is still stateless? | |
| Feb 11, 2020 at 17:03 | comment | added | Tim | Thanks. (1) Is token based authentication stateful? If yes, is it because every request is required to authenticate? (2) Is it correct that cookie can be used for implementing both session based authentication or nonsession based authentication, dependeing on what info a cookie carries? If a cookie carries session id, then it is session based authentication, and if a cookie carries non session info such as token, then it is nonsession based authentication? | |
| Feb 11, 2020 at 5:48 | history | edited | Steffen Ullrich | CC BY-SA 4.0 |
added 513 characters in body
|
| Feb 11, 2020 at 5:38 | history | edited | Steffen Ullrich | CC BY-SA 4.0 |
added 513 characters in body
|
| Feb 11, 2020 at 5:30 | history | answered | Steffen Ullrich | CC BY-SA 4.0 |