Are all session data preserved in client cookie after logout in rails 4? -

Are all session data preserved in client cookie after logout in rails 4? -

we used store session action record , moving cookies store in rails 4. understand cookies store, session info stored in client side cookies besides secret token , plan store ids in session. here few questions:

after user logs out, session info (for example, user_id , user_group_id) still preserved in client cookies next login? if user assigned new user_group_id example, old user_group_id stored in client cookies still prevail , blow off app user next login? there online posts talking app blow-off when session object gets changed on server can not updated accordingly on client side (unless alter of secret token). besides 4kb size limit , ids (session) cookie store, there other things (or disadvantage) consider when moving session db cookies store?

here low downwards on cookie store. first off, in cookie there permanently 1 time it's set or until user deletes cookie manually somehow. means, if set user_id , user_group_id, it's there in cookie until updated or deleted. different session since session ram on computer, 1 time browser closed, session closes of it's data.

so, means when log out user, need specify cookie empties don't wan't have. when user logs in, set want user have while logged in. so, since session , cookie separate things completely, never interact unless take create them. session never dump self cookie store unless create that.

every time users go site, have single handshake makes sure cookie matches db if necessary. otherwise, have differing info gets updated on login or not , without handshake, user have maintain logging in create sure still valid defeats purpose of having cookie in first place.

the downside of client side cookie storage security concerns. depending on how utilize cookie store data, person hijack somebodies cookie on site , pretend them. can avoided careful design, assume whatever in cookie store fair game utilize , non secret data.

hope helps!

ruby-on-rails session ruby-on-rails-4 cookies