Cookie

As explained in Building Web APIs with ASP.NET Core

Session-cookie authentication stores authentication state on a server-side session and sends a session identifier to the client in a cookie.

Session-cookie authentication keeps authentication state in a server-side session and gives the client a unique sessionId in a cookie. section 9.1.2

The request flow works as follows:

• Store the user’s authentication information in a key/value service on the web server or an external server or cluster. section 9.1.2
• Assign the stored session an autogenerated unique sessionId. section 9.1.2
• Send the sessionId to the browser in a cookie. section 9.1.2
• Resend the cookie on later requests so the server can retrieve the session and perform authorization checks. section 9.1.2

Figure 9.1 Authentication and authorization flow

Use the authentication and authorization flow diagram to trace how login state persists across requests. section 9.1.2

How Building Web APIs with ASP.NET Core covers it

How deep it goes

Explains the storage, identifier, cookie, and retrieval flow without detailing framework-specific configuration.

Examples

Uses a login result, a stored user identity, a generated sessionId, and repeated browser requests.

What you can do after

Evaluate how a server preserves login state and identifies users on subsequent requests.

How it connects

Connects authentication with authorization, HTTP headers, bearer tokens, API keys, signatures, and certificates.

liveBookmanning.com

Read Building Web APIs with ASP.NET Core on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eAn authentication cookie is a client-side HTTP cookie containing serialized authentication state used to recognize a signed-in user across requests.
• 

  liveBookmanning.com
  The Well-Grounded Python Developer: How the pros use Python and FlaskA cookie is client-side data exchanged with a web server on subsequent requests to retain information or identify a client.
• 

  liveBookmanning.com
  Grokking Web Application SecurityA cookie is a small piece of text that a web server directs a browser to store and send with subsequent requests to the applicable domain.
• 

  liveBookmanning.com
  Pro ASP.NET Core 7, Tenth EditionA cookie is a small piece of data that a web server stores in a client and receives with subsequent requests to maintain state or preferences.
• 

  liveBookmanning.com
  Coding with AIA cookie is a small piece of data that a web browser stores and sends with requests to preserve client-specific state.
• 

  liveBookmanning.com
  React in DepthA web cookie is a small piece of data that a website stores in a browser and can send with subsequent requests to a server.
• 

  liveBookmanning.com
  WordPress Power Toolkit: Harness AI to build next-level websitesA cookie is a small text file that a website stores on a user's device to retain information, track activity, personalize experiences, or support data collection.
• 

  liveBookmanning.com
  First-Party Data ActivationA first-party cookie is a web cookie created and controlled by the site owner for recognizing users or sessions within that owner's own interactions and infrastructure.
• 

  liveBookmanning.com
  Real-World CryptographyA cookie is a small piece of data stored by a web browser and sent with subsequent requests to a website.

Compare how 10 books explain cookie →

Related concepts

• JSON Web Tokenalternative to · A JSON Web Token is a compact, URL-safe representation of claims encoded as a JSON object and protected by a digital signature, message authentication code, or encryption.
• local storagealternative to · Local storage is a browser-provided, origin-scoped key-value storage mechanism that persistently stores string values across sessions.
• bearer authenticationalternative to · Bearer authentication is an authentication scheme in which presenting a bearer token is sufficient to use the access or authorization granted by that token.
• browserused by · A web browser is software that retrieves, interprets, and renders web resources, executes supported web content, and enables interaction with web pages and applications.
• third-party cookieincludes · A third-party cookie is a browser cookie set or accessed by a domain different from the website currently being visited.
• HTTPSaddressed by · HTTPS is HTTP carried over TLS, which provides encryption and endpoint authentication for network communication.

This explainer was generated by Manning's knowledge graph from the text of Building Web APIs with ASP.NET Core. The section links point to the parts of the book it draws on.