If an HTTP servlet receives a request with an invalid session token, what should it do next?

  • Generate a new session token and proceed
  • Ignore the request
  • Redirect to the login page
  • Send an HTTP 401 Unauthorized response
In the case of an invalid session token, it's a security best practice to send an HTTP 401 Unauthorized response to prompt reauthentication.
Add your answer
Loading...

Leave a comment

Your email address will not be published. Required fields are marked *