Home » Php » security – how the clients store token without php session and how browsers handle tokens without sessions?

security – how the clients store token without php session and how browsers handle tokens without sessions?

Posted by: admin February 25, 2020 Leave a comment

Questions:

the user needs to send the generated token with each request so the server would know the user. but how? we use tokens for session-less situations like apps(and for some other reasons). how does the user know his token and send it to server?
and if apps store token somewhere what about browsers?
please explain it and show me some codes (pure php please and don’t tell me to use jwt, I want to understand the logic.)

How to&Answers: