Javelle secure MVC Protected dashboard Sign out Checking session

Dashboard

This page is rendered only after the server verifies the signed JWT stored in the JV_AUTH HttpOnly cookie.

Session API

Browser JavaScript calls {{ sessionEndpoint() }}. The server reads the cookie and returns the user claims.

{}

Security flow

Credential check PBKDF2 Token format JWT HS256 Cookie HttpOnly TTL {{ tokenMinutes() }} minutes