4.1 Session Storage

A server-side session is a small record on the server that remembers who a user is between requests, while the browser holds only a random identifier that points to it. HTTP does not remember anything from one request to the next, yet users expect to stay logged in, so some piece of state has to survive between requests. Keeping that state on the server and giving the browser only an opaque ID is the classic answer.