Tag
session-tokens
- Aug 20, 2026 Role Assumption and the Shape of a Temporary Session How a caller exchanges long-lived identity for short-lived credentials, what the issued token actually carries, and why revocation is harder than expiry. cloud infrastructure
- Jun 19, 2024 Opaque Session Identifiers Versus Signed Tokens How server-side session lookup and self-contained signed tokens differ in revocation, verification cost, and failure behaviour when a key or a datastore goes away. security