Glossary: Web App Security and Authentication

Session

Also written: session id, server-side session

The server's record that a browser is signed in, kept in a sessions table. The browser holds only the random session id in a cookie that points to it.