Skip to content

Commit 1f08a99

Browse files
Apply suggestions from code review
Co-authored-by: Craig Shoemaker <[email protected]>
1 parent 7d8c76b commit 1f08a99

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/container-apps/sessions.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -77,14 +77,14 @@ For code interpreter sessions, you can also use an integration with an [LLM fram
7777

7878
##### Protecting session identifiers
7979

80-
The session identifier is critical and sensitive information that must be securely created and managed. It's important to secure your application to ensure each user or tenant only has access to their own sessions.
80+
The session identifier is sensitive information which requires a secure process as you create and manage its value. To protect this value, your application must ensure each user or tenant only has access to their own sessions.
8181

82-
The specific strategies to prevent misuse of session identifiers differ depending on the design and architecture of your app. However, your app must always have complete control over the creation and use of session identifiers so that a malicious user can't access another user's session.
82+
The specific strategies that prevent misuse of session identifiers differ depending on the design and architecture of your app. However, your app must always have complete control over the creation and use of session identifiers so that a malicious user can't access another user's session.
8383

84-
Some example strategies include:
84+
Example strategies include:
8585

86-
* If your app uses one session per user, each user must be securely authenticated and your app must use a session identifier that is unique to the corresponding logged in user.
87-
* If your app uses one session per AI agent conversation, ensure your app uses a session identifier that is unique to each conversation and can't be modified by the end user.
86+
* **One session per user**: If your app uses one session per user, each user must be securely authenticated, and your app must use a unique session identifier for each logged in user.
87+
* **One session per agent conversation**: If your app uses one session per AI agent conversation, ensure your app uses a unique session identifier for each conversation that can't be modified by the end user.
8888

8989
> [!IMPORTANT]
9090
> Failure to secure access to sessions may result in misuse or unauthorized access to data stored in your users' sessions.

0 commit comments

Comments
 (0)