How To Use Session cookie In A Sentence

Obtaining the Domino session cookie is an important part of the process, and you can use the same code in other Domino-related applications.
If you don't need sessions, the session handler can be removed so we don't even waste the cycles looking for a session cookie.
You can find the Domino session cookie in the Set-Cookie response header.
A user is prompted for a user name and password and given a session cookie or session header.
An attacker can take over the user session before the user's session cookie expires.

Think of a situation where an attacker has stolen a user's session cookie and thus may co-use the application.
You tell Domino your identity by appending a session cookie to the request headers.
However, for this code to work, the CherryPy server needs to be set up to associate a session cookie with each HTTP response.
Application Server only creates the session cookie for this user and assumes that this user has been authenticated.
If a session cookie has been detected, then the URL generated by Listing 14 will be like the one in Listing 15.
The attacker then simply needs to check his web server logs to know the victim's session cookie.
From the login response, get a session cookie.
A session cookie in conjunction with a random auth token or auth login validation is both reasonable mechanisms.