Model Cookies and Sessions
Create a defensive model of login state using a local toy application or supplied traces.
Create a defensive model of login state using a local toy application or supplied traces.
Prepare 20m · Build 110m · Verify 30m · Document 20m
Work only inside the folder created by Smartphone-Academy.py prepare session-model. Use the supplied samples or systems you personally administer.
Prepare the Termux workspace
Open Termux in the Academy root and prepare this lab with the local companion. It creates safe samples, notes and evidence files under your Termux account.
python Smartphone-Academy.py prepare session-modelNo root. Use the supplied files and keep the workspace under $HOME.Practical mission
- Trace the identifier from login response to later request
- Separate cookie attributes from server-side session state
- Explain when the identifier should rotate
- Test logout and expiry in the local sample only
A session lifecycle diagram covering creation, rotation, expiry and logout.
Quality gate
Analyst reflection
Which result from “Test logout and expiry in the local sample only” would need more evidence before it could support an operational decision?
After checking the evidence, run python Smartphone-Academy.py complete session-model. Progress is stored locally in the Termux home directory.