Cookies lab

Auth via httpOnly cookie

After a successful login we set an auth_token cookie with httpOnly, secure and domain abzdev2.com. The clients page uses localStorage to remember sorting per host, so you can compare state on both domains.

Credentials

admin / Qwerty123!

Both domains should point to the same app instance.

Storage

Cookie + localStorage

Cookie is shared by domain, localStorage stays isolated per domain for sorting state.