Correct way to delete cookies server-side

For my authentication process I create a unique token when a user logs in and put that into a cookie which is used for authentication. So I would send something like this from the server: Set-Cookie: token=$2a$12$T94df7ArHkpkX7RGYndcq.fKU.oRlkVLOkCBNrMilaSWnTcWtCfJC; path=/; Which works on all browsers. Then to delete a cookie I send a similar cookie with the … Read more

URL matrix parameters vs. query parameters

I’m wondering whether to use matrix or query parameters in my URLs. I found an older discussion to that topic not satisfying. Examples URL with query params: http://some.where/thing?paramA=1&paramB=6542 URL with matrix params: http://some.where/thing;paramA=1;paramB=6542 At first sight matrix params seem to have only advantages: more readable no encoding and decoding of “&” in XML documents is … Read more

Which HTTP status code means “Not Ready Yet, Try Again Later”? [closed]

Closed. This question is opinion-based. It is not currently accepting answers. Want to improve this question? Update the question so it can be answered with facts and citations by editing this post. Closed 6 years ago. This post was edited and submitted for review 6 days ago and failed to reopen the post: Original close … Read more

Difference between Pragma and Cache-Control headers?

I read about Pragma header on Wikipedia which says: “The Pragma: no-cache header field is an HTTP/1.0 header intended for use in requests. It is a means for the browser to tell the server and any intermediate caches that it wants a fresh version of the resource, not for the server to tell the browser … Read more