Hi Folks, As far as I know, authorization Cookies are valid as long as they are present in the user?s system, either the cookies expire, and erase themselves, or are destroyed when a user click?s ?Log Out??. So the authentication is based only on the physical presence of a Cookie?whether this cookie is there or not? However, if an evil doer could get their hands on an authorization cookie before it is destroyed. and copy it?then they could have access to the account, ...
Go to the complete details ...