Paths/Backend Engineer/Authentication & Authorisation / Passwords & Sessions
Design a Session
A session cookie is a bearer token with your name on it. Write the cookie settings and the rule for rotating the session after every privilege change.
Validator
IDLE — checks run live as you type commands; submit when done
01Requirements
live checks- File ~/.auth/sessions.yaml exists○
- The file states the cookie flags○
- The file states the session lifetime and the rotation rule○
02Walkthrough
1 of 3 revealed- 01
Write the cookie settings
httponly keeps the cookie out of JavaScript, secure keeps it off plain HTTP, and samesite stops it riding along on other people's requests.
echo 'session_cookie:\n name: le_session\n httponly: true\n secure: true\n samesite: lax\n path: /' > ~/.auth/sessions.yaml - 2 locked · each failed submit reveals one
03Stuck?
0 of 3 revealedTake a hint without losing the lab — each one points at the thing to look at, not at the answer.
04AI Tutor
guides, never solvesTell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?
04Notebook
saved locally in this browserlearner@lab — ubuntu:24.04
Session is disposable
↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list