1
vote
How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?
Broadly, the approach makes sense. You should delete (set to expire in the past) any "old_cookie" you receive at the same time you set the new one to move users over as quickly as possible ...
- 45.3k
Only top scored, non community-wiki answers of a minimum length are eligible