Session ID vs Session Token
In this post we will see what is a session token and session ID. Imagine, you are want to travel is a train and you buy a ticket. The ticket is valid for a certain amount of time. You can travel any number of times as long as the ticket is valid. Ticket is the "Session Token". Let's compare with distribute systems. When you login to the banking website, it prompts the user to enter with "Username: and "Password". Upon successful authentication, the authentication server generates a session token. This session token is valid for a certain amount of time. With this token, the user can make future requests in the banking site like checking balance, fund transfer. Once the token is expired, the user must "Re-Authenticate". Then, What is Session ID? When a user log to the banking website, server create a session token post verifying credentials. Then, the server creates a session ID. Server stores the token inside the session data. Server gives the...