Runs after a session starts in a browser: reissues a recognised browser's token with the next generation, or remembers a new one when asked.
A copied, unreadable or compromised cookie is cleared.
the request
the response the cookie is set on
username, recognized (the device fact), secondFactor and remember
username
recognized
secondFactor
remember
ok and what was done: none, cleared, reissued, kept, remembered or already
ok
none
cleared
reissued
kept
remembered
already
Runs after a session starts in a browser: reissues a recognised browser's token with the next generation, or remembers a new one when asked.
A copied, unreadable or compromised cookie is cleared.