in reply to Plack and Session in singed cookies
Mojolicious::Sessions manages simple signed cookie based sessions for Mojolicious. All data gets serialized with Mojo::JSON and stored Base64 encoded on the client-side, but is protected from unwanted changes with a HMAC-SHA1 signature.
plack HMAC-SHA1 -> Plack::Middleware::Session::Cookie - Session middleware that saves session data in the cookie ... Server side secret to sign the session data using HMAC SHA1
|
|---|