medium10 pts · first answer countsauthenticationsessions

Logout that only clears the cookie

Logout deletes the session cookie in the browser but leaves the session record in Redis. What risk remains?

A.A copied session id still works until it expiresB.None, because the browser no longer has the cookieC.The user cannot log in again from that deviceD.Redis will run out of memory immediately

Discussion 0

Join free to post in the discussion.

Logout that only clears the cookie

Discussion 0

Related questions