🍪

HTTP Cookies & Sessions

Simple

Free preview · 2 of 5 steps

Cookies: state for a stateless protocol

HTTP is stateless — each request is independent. Cookies solve this: the server sends a Set-Cookie header with a session identifier, and the browser automatically includes it in all subsequent requests to that domain.

The server uses the session ID to look up state (who is logged in, their preferences, cart contents) in a server-side session store.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step