WebExpress 2.0.0‑alpha – The End of Server Sessions
WebExpress currently uses a stateful session model in which a server side session is created for each client. The session ID is stored in a cookie and transmitted with every request. Initially, the session is used solely to recognize the client and is only associated with an identity after successful authentication. User, role, and permission information then becomes available within the session context. As a result, the identity is bound to the session rather than the other way around. This architectural model clearly separates the technical client context from the user identity and has proven itself in numerous applications. However, as requirements for scalability, containerization, and distributed cloud infrastructures continue to grow, this approach increasingly reaches its limits. Because authentication information is tied to the server side session context, session state must be maintained persistently and synchronized across multiple instances. This increases infrastructure co...