3 ms·
Where is the secret key stored? This may not be per session but it is per user, which for most apps is almost the same thing.
by barrkel 5y ago
Where is the secret key stored? This may not be per session but it is per user, which for most apps is almost the same thing.
- whateveracct 5y agoIt's per-user. Just a column with all their other stuff. Sessions:Users are Many:1 typically so that's not as simple
- tatersolid 5y agoSo you have todo a DB call to get this key on every page load or API request? You’re back to square one. Just use an opaque random session ID
- whateveracct 5y agoI do those anyways - from my user table. But I don't have some extra table of sessions that is append-only (modulo expiration). Cuts out an entire system.