[dancer-users] session cookies

[Rick Leir]

On Thu, Nov 19, 2015 at 7:00 AM, <dancer-users-request at dancer.pm> wrote:

>
> This blog of mine might be helpful in understanding how it all works:
>
> http://blog.geekuni.com/2015/06/three-ways-to-implement-sessions.html
>

We should also be talking about JWT JSON Web Tokens because the Cookie
scheme is broken.
I use Crypt::JWT . These links explain it nicely:

https://auth0.com/blog/2014/01/27/ten-things-you-should-know-about-tokens-and-cookies/
http://jwt.io/
JWS https://tools.ietf.org/html/rfc7515
JWT https://tools.ietf.org/html/rfc7519
http://stackoverflow.com/questions/20504846/why-is-it-common-to-put-csrf-prevention-tokens-in-cookies
Cheers -- Rick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.preshweb.co.uk/pipermail/dancer-users/attachments/20151119/572db1d4/attachment.html>