What is remember-me?
A convenient feature to offer frequent users of a website is the remember-me feature. This feature allows a user to elect to be remembered even after their browser is closed. In Spring Security, this is implemented through the use of a remember-me cookie that is stored in the user’s browser. If Spring Security recognizes that the user is presenting a remember-me cookie, then the user will automatically be logged into the application, and will not need to enter a username or password.
What is a cookie?
A cookie is a way for a client (that is, a web browser) to persist the state. For more information about cookies, refer to additional online resources, such as Wikipedia (https://en.wikipedia.org/wiki/HTTP_cookie).
Spring Security provides the following two different strategies that we will discuss in this chapter:
- The first is the token-based remember-me feature, which relies on a cryptographic signature
- The second method, the
persistent...
