Introduction


This article continues the authentication series and focuses on how sessions work internally, how they are restored on every request, and how to secure them properly using Redis, Passport, and session rotation.







Sessions Overview


Imagine a user wants to change their password in our application.

Before doing so, they...