Fingerprints
How to authenticate session fingerprint
Optimally, store the fingerprintSecret on the user device. It cannot be retrieved once lost.
An optional feature that enhances session management. By using a fingerprintSecret, you can encrypt session data, ensuring it can only be decrypted with both the fingerprintSecret and the envSecret. This adds an extra layer of security for persistent sessions.
To authenticate a session fingerprint, you must include fingerprintSecretin the request headers.
Header Key
Value
X-Fingerprint-Secret
fingerprintSecretLast updated