Go gorilla/securecookie library of the day
A cookie is a mechanism used to transfer small amounts of data between a Web client (typically a browser) and a server. The cookie is generated by the server and sent to the client for preservation. The client will bring the cookie with each subsequent request. Cookies are now more or less abused. Many companies use cookies to collect user information, serve ads, and more.
Single sign-on (sso)
Single sign-on (SSO) is a one-time authentication login by the user. When the user logs in the authentication server once, he/she can get access to other related systems and application software in the single sign-on system. This method reduces the time consumption generated by the login and assists the user management. It is a popular login method at present
Front-end interviews 3+1 daily -- Day 645
Today's point (2021.01.20) -- Day 645 [HTML] What is the difference between local storage and cookies? What are the different types of functions in Less? [JS] Write a JS method to judge whether the element is in the visible area [Soft Skilled] Tell me about your understanding of 3-minute enthusiasm and sustained enthusiasm. In The Analects of Confucius, Confucius Zeng said: "I examine myself three times every day" (I reflect on myself many times every day). Front-end interview daily 3+1 questions, interview questions to drive...
Beyond Cookie: Today's client-side data storage technology
When cookies were first introduced, they were the only way for browsers to store data. Then there are a number of new options: the Web Storage API, IndexedDB, and the Cache API. So is the cookie dead? Let's take a look at some of these techniques for storing data in a browser.
Use login registration to understand how cookies work
This article is a practical understanding of the previous article (Cookie theoretical knowledge) complete code: complete code Cookie in the process of registration login: registration of the account password written into the database login login for the first time when the server sends a Cookie to the browser. Backend login routing code (nodejs): {code... } At the moment of successful login, a Cookie needs to be set in the background to record the login user ID (represented by mailbox here, the code is in...
Single Sign-On (SSO)
The original login method is that each website has its own login system and independent account. Users need to log in again to access each system. The accounts can not be shared between systems, and the login status can not be shared, which will lead to some drawbacks:
Front-end interviews 3+1 daily -- Day 242
Today's point (December 14, 2019) -- Day 242 [HTML] How do I prevent cookies from being stolen? [CSS] Explain CSS3's Flexbox (Flexible Box Layout Model) and how it can be used. [JS] Tell me about your understanding of JS sorting, what algorithms do you know? 1. Do you have a girlfriend? Are you married? Do you have any children? In the Analects of Confucius, Confucius Zeng said: "I examine myself three times every day" (I reflect on myself many times every day)...
Front-end interviews 3+1 daily -- Day 411
Today's point (2020.05.31) -- Day 411 [HTML] Have you ever used the HTML5 RT tag? What are the applications? [CSS] Draw a parallelogram with CSS [JS] Write a method to paste the copied picture and display it. [Soft Skills] What is Cookie Faking? How to prevent counterfeiting? In The Analects of Confucius, Confucius Zeng said, "I examine myself three times every day." (I reflect on myself many times every day.) Front-end interview daily 3+1 questions to interview questions...
Front-end interviews 3+1 daily -- Day 218
Today's knowledge point (November 20, 2019) -- Day 218 (I also want to write a question) [HTML] Canvas how to solve the problem of image and text blurring? [CSS] Use CSS to write a horizontal flip text effect [JS] Use JS to block a cookie operation method [Soft Skills] Have you ever been on a job before? What will you do if your company requires you to travel? In The Analects of Confucius, Confucius Zeng said, "I examine myself three times every day." (I reflect on myself many times every day.) Front-end interviews...
Stop using JWT for session management now
Recently, it has been found that many Web applications use JWT for session management, the reason is to avoid server-side storage sessions, or the pursuit of autonomous control, I do not know the use of JWT for session management has a huge security risk!