natsukagami
commented
1 year ago - An ephemeral session key is generated every restart of kjudge. The cookie now stores this session key. This ensures the cookie never lives past kjudge restarting.
- Access key is no longer stored on the cookie itself.
- We only store the hash of the key in long-term memory.