Session store.
also: distributed session store · session storesA shared, fast store (often Redis) for user sessions, so any stateless server can read a user's session by its ID.
the two-minute refresher
- A session holds auth state, preferences, cart and CSRF tokens; the client keeps only the session ID cookie.
- Every request looks the session up by ID in the shared store.
- Servers become stateless and interchangeable.
- The store must be fast, replicated and expire sessions (TTL).