in reply to Plack and Session in singed cookies

plack session cookie, plack session signed ->
Plack::Middleware::Session::Cookie - Session middleware that saves session data in the cookie
Plack::Middleware::Session::SerializedCookie - Session middleware that saves session data in the customizable serialized cookie
Plack::Session::State::Cookie - Basic cookie-based session state
Plack::Middleware::Session::Simple::JWSCookie - Session::Simple with JWS(JSON Web Sigmature) Cookie ... using HMAC Signature

Mojolicious::Sessions manages simple signed cookie based sessions for Mojolicious. All data gets serialized with Mojo::JSON and stored Base64 encoded on the client-side, but is protected from unwanted changes with a HMAC-SHA1 signature.

plack HMAC-SHA1 -> Plack::Middleware::Session::Cookie - Session middleware that saves session data in the cookie ... Server side secret to sign the session data using HMAC SHA1

  • Comment on Re: Plack and Session in singed cookies