session-management-cookies

What problem does it solve?

This Skill provides guidelines for implementing robust session handling that prevents fixation, hijacking, and theft, enhancing web security.

Core Features & Use Cases

• Secure Session Implementation: Advises on generating unguessable session IDs, setting secure cookie flags, and server-side session control.
• Cookie Management: Demonstrates setting Secure, HttpOnly, and SameSite flags to protect against attacks.
• Detection of Hijacking Attempts: Describes server-side fingerprinting and risk-based responses to suspicious activities.
• Use Case: For a web application requiring high security, implement session rotation and fingerprinting to prevent session hijacking and detect anomalies.

Quick Start

Follow the guidelines to set cookie flags properly and implement session ID regeneration upon user login to enhance security.