Skip to main content
  • A session is a group of interactions between a user and an application during a given timeframe. A single session may consist of multiple activities (such as page views, events, social interactions, and e-commerce transactions) and can store this information temporarily while the user is connected. With a standard Set-Cookie header implementation, a session ends when a user leaves a website or closes their browser. To prevent users from having to log in every time, applications can extend sessions by setting a maximum lifetime for the . Sessions end when a user logs out or a session lifetime limit is reached.
  • Cookies are strings of data that a web server sends to the browser. When a browser sends a future request to the web server, it sends the same string to the web server along with its request.
Websites typically use cookies to ensure that users are recognized when they move between pages, so they don’t get asked to log in again every time. Websites also use cookies to remember information users have entered. For example, e-commerce sites use cookies to remember the items placed in a shopping cart.

​
Concepts

About Cookies

Describes what cookies are and how they can be used with sessions to track user authentication.

Session Layers

Learn about Auth0 session layers created when a user logs in, the application session, the Auth0 session, and the IdP session layer.

Session Lifecycle

Learn about the Session Lifecycle.

Session Metadata

Learn how to use Auth0 session metadata to store custom data on a session that persists across requests and is accessible from Actions, the Management API, and tokens.

Anonymous Sessions

Learn how to create and manage user sessions without requiring authentication.

​
How To

​
Manage Sessions

Manage User Sessions with the Management API

Manage user sessions with the Auth0 Management API to list active sessions, revoke individual sessions, or end all sessions.

Manage Sessions with Actions

Manage Auth0 user sessions with Actions to read session metadata, set custom session lifetimes, and revoke or extend sessions.

Configure Session Lifetime

Describes how to configure session lifetime for a tenant using the Auth0 Dashboard, the Management API and Actions.

Configure Session Metadata

Learn how to configure Auth0 session metadata using Actions and the Management API.

Configure Anonymous Sessions

Learn how to configure anonymous sessions using the Auth0 Dashboard or Management API.

Configure Custom Claims for Anonymous Sessions

Map anonymous session metadata into access token custom claims using claims mapping.

​
Manage Cookies

Authentication API Cookies

Learn about Authentication API cookies, including what they are, what they are used for, and how they should be handled.

Authenticate Single-Page Apps With Cookies

Describes how to use your backend server to authenticate a single-page app (SPA) with cookies.

SameSite Cookie Attribute Changes

Describes how browser changes, such as the SameSite cookie attribute, affects your web applications that embed content from third-party domains.

​
Use Cases

Sessions Use Cases

Explore different ways to use sessions to determine whether a user is authenticated based on the kind of application and authorization flow involved.

Configure Keep Me Signed In with Sesssions

Learn how to configure Keep Me Signed with Auth0 sessions to give users persistent or ephemeral sessions.

Manage Multi-Site Sessions with the auth0-spa-js SDK

Describes the workflow with the auth0-spa-js SDK to support multi-site session management.

Use Cases: Organization Information in Session Metadata

Learn how to use Auth0 Actions to add user organization information to session metadata.

Anonymous Sessions Use Cases

Learn about anonymous sessions use cases with Actions.