3 ms·

In the proof of concept I linked, a self expiring session token is given to the client. If it is returned before the expiry, a new token is generated and the p

In the proof of concept I linked, a self expiring session token is given to the client. If it is returned before the expiry, a new token is generated and the process starts over. If it is not returned before its expiry the session is considered to have been closed.

deleted 2y ago
[deleted]
SirensOfTitan 2y ago
But how are you storing the session token in the browser?
- zelon88 2y ago
  In a hidden DOM on the page. Updated asynchronously. There is Javascript running on the page that updates the DOM. So as long as the user is on the page, the "session" stays alive.
  - milesrout 2y ago
    A session by definition extends beyond one page.
    - jdlshore 2y ago
      With some nastiness, you could make every link on the page a form submission and submit the session ID with the form. Then render it into the HTML that’s returned in response.
      - milesrout 2y ago
        A rose by any other name would smell as sweet.