Session Cookie & Token

HTTP

HTTP Client Server Server Client Cookie Session

Cookie Session

• Session Cookie Session Server Cookie Client

• Cookie Session

• Cookie Session Session

• Cookie 4KSession Cookie

Client Server

Session ID Cookie Session

1. Client Http Server
2. Server Client Server Session Client Session ID Session ID Response Headers set-cookie

• Set-Cookie: sessionId=xxx; expires=xxx; path=/;....

Client

1. Cookie Server Cookie Session ID Session

...

SessionDB
a.
b.

JSON Web TokenJWT RESTful API Stateless Session JWT

JSON Web TokenJWT

- Stateless
-

JWT Token

• TokenServer Client Token Token

• JWT Token Payload Client Server JWT JWT

Token

1. Token
2. Client Token Token Cookie
3. Cookie(JWT) Request Headers authorization

1. Server Cookie Response Client

Token Server Server Token Token Session