Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement signed cookie backend #2

Open
seliopou opened this issue Dec 18, 2015 · 0 comments
Open

Implement signed cookie backend #2

seliopou opened this issue Dec 18, 2015 · 0 comments

Comments

@seliopou
Copy link
Member

On the suggestion of @edwintorok on the mailing list, implement a signed cookie backend that uses the client to store all session data. Verify that the session data hasn't been tampered with by signing the session data before sending it to the client. Examples of this include:

@tizoc also mentioned that he has implemented this and included the implementation in a gist, which could hopefully be the basis for the implementation of a secure cookie backend for this project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant