Fingerprints
How to authenticate session fingerprint
Optimally, store the fingerprintSecret on the user device. It cannot be retrieved once lost.
An optional feature that enhances session management. By using a fingerprintSecret
, you can encrypt session data, ensuring it can only be decrypted with both the fingerprintSecret
and the envSecret
. This adds an extra layer of security for persistent sessions.
To authenticate a session fingerprint, you must include fingerprintSecret
in the request headers.
Header Key
Value
X-Fingerprint-Secret
fingerprintSecret
Last updated