Fingerprints
How to authenticate session fingerprint
Last updated
How to authenticate session fingerprint
Last updated
Optimally, store the fingerprintSecret on the user device. It cannot be retrieved once lost.
An optional feature that enhances session management. By using a fingerprintSecret
, you can encrypt session data, ensuring it can only be decrypted with both the fingerprintSecret
and the envSecret
. This adds an extra layer of security for persistent sessions.
To authenticate a session fingerprint, you must include fingerprintSecret
in the request headers.
X-Fingerprint-Secret