Session Data

Session data: information generated and tracked during a single user interaction period with a system – session ID, login timestamp, authentication tokens, timeout duration, navigation history, cart/form state, activity logs within that session.

Testing Implications:

1. Session management testing – verifies session creation, timeout, and termination behave correctly. Includes forced logout after inactivity, session expiry on password change, concurrent session handling.
2. Session security testing – checks for session fixation, session hijacking, token exposure in URLs, insecure cookie flags (HttpOnly, Secure, SameSite).
3. Session persistence testing – confirms data (cart contents, form entries, unsaved work) survives or correctly clears across page reloads, tab duplication, browser crashes.
4. Concurrency testing – validates behaviour when the same user opens multiple sessions across devices or browsers: does one session invalidate another, or do both run simultaneously as intended.
5. Load/performance testing – measures how session storage (server-side or token-based) performs under high concurrent session counts.