Difference between cookies, session and tokens

What are cookies, sessions, and tokens? Most web servers use cookies to send the session-ID after you log in.
🔻 Click on SHOW MORE 🔻
So the server will store the session information in the database while you will only have the session id in a cookie, which is stored in the filesystem of your computer.
Next time you request another page, your browser will automatically send a cookie containing your sessionId, which the server will check to see if it is valid.
The session-ID is randomly generated and should be hard to guess. If you log out, the session will be deleted on the server, but also the server will instruct the browser to delete the cookie containing the session-ID.
An alternative to this is to store information on the client and sign it. In this scenario, anyone holding the signature can quickly check if the data was manipulated or not. One way to do this is to use JSON Web Tokens (JWT tokens).
Let's now assume that you want to install an app on your phone, which can help you with your finances and keep track of your spendings. What you don't want to do is to give your username and password to this app, which was not created by your bank. This is when access tokens are being used to grant access to your data.
Technologies mentioned in this video:
JWT Tokens: jwt.io/
OAuth, OAuth2: oauth.net/
OpenId: openid.net/
#cookies #sessions #tokens
--
⭐️ Additional explanation ⭐️
[1] In the example shown, the user transitioned from a not-logged-in state (one session id) to a logged-in state (new session id). This is why you see two cookies. Make sure you check the HTTP requests for the Set-Cookie and Cookie headers.
[2] While both the Cookie/Set-Cookie and Authorization are headers, a browser will always treat the Cookie/Set-Cookie differently.
If this was helpful and you want to support me create more videos like this one, please consider subscribing.
👉 / @vdespa
--
⭐️ Video contents ⭐️
⌨️ 00:00 - Login example with cookies
⌨️ 05:26 - Recap: cookies and sessions
⌨️ 06:06 - Token-based authentication
⌨️ 09:20 - Difference between tokens vs session cookie
⌨️ 11:00 - Conclusion
--
⭐️ 💬 I have a question. ⭐️
I do my best to answer all comments here on KZbin but I cannot make any guarantees.
Please do not email me or contact me on other channels as I might not be able to answer. Sorry!
--
⭐️ 💡 I have a video idea ⭐️
Do you want me to create a video on a specific topic? Just fill out the form below:
forms.gle/uWEzXFQ2viJtZtvZ7
--
⭐️ 📩 Contact & Imprint ⭐️
👉 Follow me on Twitter:
/ vdespa
👉 Follow me on Medium:
/ vdespa
👉 Follow me on Facebook:
/ valentin-despa-1130381...
👉 Let's connect on LinkedIn:
/ vdespa
vdespa.com/imprint

[@vdespa]

Liked this explainer video? Which topic should I cover next? Fill out this form: forms.gle/PTCM6RuWNHwZmhNNA P.S. Thanks for all your kind comments and sorry for the annoying background music!

[@chia-anyang1276]

Had been confused for their difference for so long. Thank you for the clear explanation!!

[@vdespa]

Glad it helped!

[@thehowerd8634]

Excellent work man! I feel like this explanation was much easier to understand than reading the documentation. Also, I'm really digging the graphics and animations!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@ioana4963]

I started with your Agile courses, now I am learning Postman with you. You're an awesome trainer!

[@vdespa]

Thanks Ioana 👍

[@user-dj9ek9sr3m]

The clearest video about cookie imo. Thanks a lot!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@be_like_vishnoi7778]

Learning through virtual representations is the best way to remember concepts for a long time, Great work!

[@vdespa]

Glad you think so! You are welcome. Thank you for leaving a comment.

[@user-wq7nj5on6z]

First video to help with the topic!! please KEEP DOING MORE ^_^

[@vdespa]

Thanks. Will do. Please submit your suggestions.

[@Agorila09]

I love that you show the real tables and real encoded and decoded json.

[@vdespa]

I am glad that you liked it. You are welcome. Thank you for leaving a comment.

[@jacobshade]

Thank you! This was the only short video example I could find on the use cases of tokens

[@vdespa]

Glad to hear, Jacob. Thanks for your comment.

[@azlanuza1330]

Simplified, clear and informative. Thanks for sharing.

[@vdespa]

I am glad that you liked it.

[@knightjaz2598]

Thank you for the detailed yet simple to understand explanation.

[@vdespa]

You're welcome. I am glad it helped

[@deleted7023]

I would pay anything to see more content like this. Thank you, u' the best bro.

[@vdespa]

Glad you enjoyed! You are welcome. Thank you for leaving a comment.

[@__priyanshu__sharma____]

I was confused so much on this topic . But after watching this i am thinking why so many youtubers made this topics so confusing expect you . The best explanation of cookies, Session and tokens.. Thank you so much.

[@vdespa]

Glad you liked it! You are welcome. Thank you for leaving a comment.

[@Sandywf]

Awesome explanation...put all the concepts/terminologies clearly on the table so that can easily differentiate between these terms.. subscribed immediately.... Kudos

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@bholanathm7211]

Earlier i completed a tutorial of yours in Udemy on rest apis and it was also very well explained. This video is the first one of yours i'm watching in KZbin and it is so nice.. anybody can understand it. This video deserves a 1000 likes and comment!! Thank you very much!!

[@vdespa]

You're very welcome!

[@hristokalchev891]

@@vdespa can you give a link to the RestAPI tutorial

[@drinks.a4230]

Great Job Valentin! Very well explained and easy to learn! Thanks a lot!

[@vdespa]

Glad you liked it! You are welcome. Thank you for leaving a comment.

[@adelevance2105]

I’m preparing for an interview, and your videos help a lot! Thank you for your great work! 🤗

[@vdespa]

You bet! And good luck with your interview.

[@lightyear3429]

Did u get the job?

[@andronasef]

Very easy to understand. good animation. best voice over. Thx Valentin.

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@jakubcejka5411]

Incredibly simple explanation. Thank you very much.

[@vdespa]

Glad you liked it You are welcome. Thank you for leaving a comment.

[@ifaceTech]

Great channel, I've learned a lot. You're very clear and to the point.

[@vdespa]

Glad that it helped. You are welcome. Thank you for leaving a comment.

[@zm690]

This is so clear and easy to understand. Thank you.

[@vdespa]

You're very welcome! I am glad that it helped.

[@rizwanulhassan5052]

been trying for some days but in vain. Your video helped me to understand the concept thoroughly

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@AbdulBasit-ib6by]

Such a very detail and informative video where you explain each important aspect of both session and token mechanism is a slow mode.

[@vdespa]

Glad you enjoyed it! You are welcome. Thank you for leaving a comment.

[@lovebaking2503]

Thanks for the clear and concise explanations.. the analogies are well done!

[@vdespa]

Glad you enjoyed it! You are welcome. Thank you for leaving a comment.

[@safaakhoudja2092]

the clearst video about cookies and sessions AWSOME !!!! thank you so muchh brooo

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@benjaminlow6094]

Thank you for this explanation video. Clarifies the concept of tokens and sessions well!

[@vdespa]

I am glad that it was helpful!

[@Anythiny]

this is goldmine of concepts for beginners.Keep creating more

[@vdespa]

Thanks you. Feel free to make suggestions.

[@aakashgyl]

Superb explanation, really easy to understand and that too with real world examples. 👍

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@noahb5019]

Your video is really among the best! It was so good that I was able to tolerate the unbearable background music (you don't need music, what you're saying is interesting enough). I agree with others that your channel is horribly underrated. Please keep up the good work!

[@vdespa]

Glad it was helpful! Thank you for letting me know about your thoughts.

[@mback12000]

Agreed. I don't understand why some"explainer" or tutorial videos do this.. Ever sit down in school for a hard subject and a teacher puts loud jingles on while talking? Of course not.

[@SalakotPhilippines]

Thank you Valentin, currently some of this is clear now to me, thank your for uploading this kind of informative video in a concise manner.

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@shriramkardile7064]

Very well conceptually explained !! Thanks a ton !

[@vdespa]

Glad you liked it! You are welcome. Thank you for leaving a comment.

[@dopetag]

The explanation was quite clear! Thank you

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@ritikajha8530]

Tomorrow is my exam but I still don't understand these cookie and session terms but now I can easily write everything with example...Great work man 🤩⭐️

[@vdespa]

Happy to help! You are welcome. Thank you for leaving a comment.

[@trickygaming4516]

Same, Feel aiivgel chay lekin concept samjha na pebay..

[@aprasath1]

Nice video. Larger picture is always the most important. You did a great job there!!! Thanks a lot.

[@vdespa]

Glad you liked it, thanks for the nice words.

[@pratish_ganguly]

Thank you for making it so simple to understand.

[@vdespa]

I am glad it was easy to understand. Thanks 👍

[@aldanamichelino]

One of the best explanations I found!

[@vdespa]

I am glad it was helpful! Thanks.

[@malcolmlagares8245]

What a great video. Excellent work. Thank you so much. I'm going to watch this multiple times. I've liked and subscribed based on this video alone. . . Thank you.

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@rukshanj.senanayaka1467]

This is really well put-together. Thanks a bunch!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@joshkny]

Gym membership analogy was spot on. Great works again!

[@vdespa]

Appreciate it! You are welcome. Thank you for leaving a comment.

[@void2623]

thanks a lot for this video. It was very concise, to the point and very easy to understand. Will definitely checkout your other videos as well. Thanks again

[@romanpavlov9706]

Oh man, thank you very much! Just recently i was asked this question during the interview on QA Manual position and failed miserably. Now I am ready and armed for this fight)

[@vdespa]

Good luck next time. Thanks for your comment.

[@peichitsai6530]

Your explanation is so clear!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@tanmaykumar9277]

This video was soooo amazing!! I understood everything now!! : ) Thankyou for making my life better : ))))

[@vdespa]

You are welcome!

[@gowthamikumar3511]

Love how you have explained this, thank you.

[@vdespa]

Glad you enjoyed it! You are welcome. Thank you for leaving a comment.

[@elraziuni]

Very informative & easy to digest. Thanks!

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@dirkjensen935]

Thank you I was so confused by this. This video was exactly what is needed

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@ilhamferry3382]

Wow, it's really easy to understand what you mean, and thanks for the analogy (that's very helpful).

[@vdespa]

Glad it was helpful!

[@mariadmt8569]

Foarte bine explicat, Valentin!

[@vdespa]

Mulțumesc, Maria!

[@collinsigeh]

This is amazing! 👍👍Very easy to follow video with great illustrations. Thanks for this video.

[@vdespa]

You're very welcome!

[@noorzaibchohan1200]

very well explained. I was very confused about these simple terms.

[@vdespa]

Thanks 👍

[@favourz1]

THANKS. I love this method of learning with infographics. Easy to learn

[@vdespa]

Great to hear! You are welcome. Thank you for leaving a comment.

[@faraitanekha2642]

Wonderful, informative presentation! A lot to absorb in one go though, I'll have to watch the vid one or two more times 😃 Thank you.

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@lastidea4925]

What a great explanation! Thank you!

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@githinjibonface8486]

very informative to start my software testing career. I like your teaching methodology

[@vdespa]

Great to hear! Best of luck to you in your career.

[@user-yr4vo2nu3o]

such a clear explanation, nice work!

[@vdespa]

Glad it was helpful! Thank you for leaving a comment.

[@Klusio19]

Wow! Very good explanation. Drawings helped a lot too. Very well done sir!

[@vdespa]

Glad that it helped! You are welcome. Thank you for leaving a comment.

[@Sesam92]

This is very well done, explained and helped me a lot. Thank you very much!

[@vdespa]

Glad it helped! You are welcome. Thank you for leaving a comment.

[@surya.maheshkolisetty1997]

Excellent Information :) Most Underrated Channel deserves more Appreciation (Likes and Subscribers )

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@ayush1kumar890]

The best video I could found cleared my every doubt

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@user-mc3ei9vi9b]

Absolutely brilliant. Clearly explained

[@vdespa]

Glad it was helpful! Thank you for leaving a comment.

[@thanhloanle6181]

This one is helpful. Thank you so much! 🥰

[@vdespa]

Thanks for letting me know!

[@svalyavasvalyava9867]

Thank you infinitely for the explanation! 😊

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@SN-zr3rf]

Excellent presentation. But one point, i would like to highlight here which is "Cookie biased Session authentication" would not allow to access all the information. For example: In banking internet web portal, User-A has logged into by using his credentials. Once the user credentials are verified for User-A , application server assign cookie to the user-A and respond back to Brower client. For each request of this user-A, , application server should perform 2 checks -First, verify the cookie validity and second, the requested operation whether it is permitted to this user-A. If anyone of the above checks is failed, the application server should redirect to logic page to User-A.

[@columbineNovi]

Paldies par dalīšanos. Es izmantoju Morelogin, un tas aizsargā privātumu.

[@SewonKimMusic]

incredible explanation man! great video!

[@vdespa]

Glad that it was helpful. Thank you for leaving a comment.

[@jafarsadik4335]

Well explained. Thanks for such a great content!

[@vdespa]

My pleasure! You are welcome. Thank you for leaving a comment.

[@sherylbee9120]

i LOVE this video. oh man. just delete all the other ones!!! being a little dramatic, lol, but I been hunting around for over an hour for a clear explanation with no random holes! TYSM for being so thorough and not leaving anything to assumption or the power of "et voila"! technology shouldn't feel like a magic trick. sheesh.

[@vdespa]

Thank you! Glad it helped.

[@mario1ua]

Great explanation, thank you so much!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@steffencornwell9633]

Great video! Thanks so much for making this!

[@vdespa]

Glad it was helpful!

[@somethingmeaningful]

loved this! So simpley explained!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@namelessyoutubechannel]

Fantastic video!!! Very helpful and informative.

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@dharma01v]

Thank You - clear explanation and very useful

[@vdespa]

I am glad that it was helpful. You are welcome. Thank you for leaving a comment.

[@navjotmannan7303]

Marvellous!! Very easy to understand.

[@vdespa]

Glad you think so! You are welcome. Thank you for leaving a comment.

[@snorkilator]

Thanks. This is a wonderful video. Clear, with nice visuals

[@vdespa]

Glad you liked it! You are welcome. Thank you for leaving a comment.

[@joneslt]

Fantastic! I understand this now! Thanks for posting

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@raydenwang6195]

This is so helpful! Thank you so much!

[@vdespa]

You're so welcome!

[@sameerbedi1122]

fantastic video,, well-articulated and very clear and concise

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@srinivasmekala1189]

Greate video, I am now clear with the difference between a token and a session and what is used when. Thank u

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@wanderlust5379]

This was very well explained thank you.

[@vdespa]

Glad you enjoyed it! You are welcome. Thank you for leaving a comment.

[@sanjayns9462]

This is amazing, kudos to your hard work, thanks for helping :)

[@vdespa]

Happy to help! You are welcome. Thank you for leaving a comment.

[@sreenivasuluetela3201]

very well understood, Thanks .. Keep posting more videos and we love to watch

[@vdespa]

Thank you, I will. You are welcome. Thank you for leaving a comment.

[@bashok67]

The concepts were well presented; thanks

[@vdespa]

I am glad that it was helpful.

[@beffjezos1052]

I never comment on KZbin, but god damn this was a great video for a dumb ass such as myself. Keep it up. People do not understand that to truly know a subject you must be able to break it down for the slow folks - thanks!

[@vdespa]

Thanks for your comment, I am glad this helped!

[@codingkiddo9727]

Am really thankful to you.... It really helped me lot ... Great work 🥳

[@vdespa]

Glad to hear that You are welcome. Thank you for leaving a comment.

[@iterator]

Hi Thanks for this awesome video. I have one query. The table you demonstrated in DB contains sessionId as one of column against customerId. Shouldn't we store this sessionId as a primary key for fast lookup ? Or is this sessionId would be a primary key in some other table ? Thanks

[@vdespa]

This is just an example. Typically you won't need a primary key for the session id.

[@vittoriab]

Very helpful!! Thank you so much for the video!!

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@FernandoJaramillo-jw7nm]

Tahnk you for the info. Very good explanation..! Teaching is one of your talents for sure.

[@vdespa]

I appreciate that! You are welcome. Thank you for leaving a comment.

[@mousavy]

You made me clear by this👏🏻

[@vdespa]

I am glad that it helped!

[@alexshmalex]

Brilliant explanation. Thank you!

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@peepsperumal3552]

Explanation is really good ❤

[@vdespa]

Glad to hear that, thanks!

[@mbohblesspn4887]

The breakdown was awesome

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@guybrush77]

You're great, explain very well!

[@vdespa]

Glad it was helpful! You are welcome. Thank you for leaving a comment.

[@tech_tutorials2053]

thank you. very good explained with the animations.. btw, I like the background music 😅

[@vdespa]

Glad you liked it! You are welcome. Thank you for leaving a comment.

[@saltru3846]

Thank you, very nice way to explain.

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@KarnasJourney]

Thanks a lot ....I confused a lot before watching This video

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@ab2able2]

Easy to understand... Thank you

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@ujwalsarap8683]

thanks sir , very simple language anyone can understand.

[@vdespa]

You are welcome. Thank you for leaving a comment.

[@vovaka440]

A good explanation, thank you! :)

[@vdespa]

Thanks. Consider subscribing

[@vovaka440]

@@vdespa Not only, I already have your course about Postman on Udemy ;)

[@narendrar9940]

Very nice explanation, nice graphics, and background music, i enjoyed learning watching this video. Thanks!

[@vdespa]

Glad you enjoyed it! You are welcome. Thank you for leaving a comment.

[@surajpatil6635]

Superb. Great Explanation!! 👍👍

[@vdespa]

Glad you liked it