DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
What makes session cookies inherently, trivially revocable, unlike a stateless bearer token?
A
Cookies are encrypted and tokens are not
B
The session cookie holds only an opaque identifier — the actual session data lives server-side, so deleting that server-side record immediately invalidates the session regardless of what the client holds
C
Cookies automatically expire after 5 minutes always
D
There is no real difference in revocability between the two
Check Answer