Skip to content

Commit 1c0520d

Browse files
authored
Merge pull request #1045 from DuendeSoftware/ar-say-ticket-is-encrypted-in-db
Added sentance to Server-Side Session Store saying data is encrypted
2 parents e1d0c95 + e3fa91c commit 1c0520d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

astro/src/content/docs/identityserver/data/operational.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ The [server-side sessions](/identityserver/ui/server-side-sessions/index.md) fea
108108
### Server-Side Session Store
109109

110110
The [IServerSideSessionStore](/identityserver/reference/stores/server-side-sessions.md) abstracts storing the server-side session data.
111-
[ServerSideSession](/identityserver/reference/stores/server-side-sessions.md#serversidesession) objects act as the storage entity, and provide several properties uses as metadata for the session. The `Ticket` property contains the actual serialized data used by the ASP.NET Cookie Authentication handler.
111+
[ServerSideSession](/identityserver/reference/stores/server-side-sessions.md#serversidesession) objects act as the storage entity, and provide several properties used as metadata for the session. The `Ticket` property contains the actual serialized data used by the ASP.NET Cookie Authentication handler. By default, this serialized data is stored in an encrypted state using ASP.NET Core Data Protection.
112112

113113
The methods on the [IServerSideSessionStore](/identityserver/reference/stores/server-side-sessions.md) are used to orchestrate the various management functions needed by the [server-side sessions](/identityserver/ui/server-side-sessions/index.md#session-management) feature.
114114

0 commit comments

Comments
 (0)