Patent attributes
A client cookie management system is disclosed that includes capabilities for securely managing a session between a web-based application and a user interacting with the web-based application using session cookies. The system receives a request from a user to access a resource provided by a web server and forwards the request to the web server. The web server generates a session cookie comprising a session identifier associated with a session created for the user. The system receives the session cookie from the web server and generates a new session cookie comprising a new session identifier and transmits the new session cookie to the client application. The system receives a second request to access a different resource from the client application. The second request comprises the new session cookie. Upon determining that the new session cookie is not modified, the system transmits the second request to the web server.
