Company
Date Published
Author
Dan Moore
Word count
1034
Language
English
Hacker News points
1

Summary

FusionAuth supports two main approaches to application session management: centralized session management and application managed sessions. A user session refers to the period during which a user interacts with an application, typically beginning when the user first accesses the site and ending when they log out or remain inactive for a predefined period. With FusionAuth, there are three types of relevant sessions: application sessions created after authentication, FusionAuth SSO sessions available only when using hosted login pages and a browser or webview, and centralized sessions represented by refresh tokens. Centralized session management allows tracking of user sessions across different applications, while application managed sessions require each application to manage its own session individually, with less control over session timeouts and no central view in FusionAuth. The choice between centralized and application managed sessions depends on the application's needs, with centralized sessions offering more flexibility but also implementation complexity and reliance on FusionAuth's APIs.