Blog: Facilities

Name: CraftSessionId

Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.

Provider: this site

Expiry: Session

Name: *_identity

Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.

Provider: this site

Expiry: Persistent

Name: *_username

Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.

Provider: this site

Expiry: Persistent

Name: CRAFT_CSRF_TOKEN

Description: Protects us and you as a user against Cross-Site Request Forgery attacks.

Provider: this site

Expiry: Session

Name: gl_dbm_session

Description: Guestline cookie for storing session data for the Guestline iframe

Provider: this site

Expiry: Session

Name: ai_user

Description: A unique user identifier cookie, set by Microsoft Application Insights software, that enables counting of the number of users accessing the application over time.

Provider: this site

Expiry: 1 year

Name: ai_session

Description: This is a unique anonymous session identifier cookie set by Microsoft Application Insights software to gather statistical usage and telemetry data for apps built on the Azure cloud platform.

Provider: this site

Expiry: 30 minutes