How from one page to another I am still logged into my account ? How can I do this for my own tor website ? Are there some sort of cookies there ? I'm using golang too.
For sensitive things, sessions are better, because the user can't change a session of "logged_in" to something else.
Cookies can work in something like user preferences, e.g, the cookie of "background_color" can be set to "red" and it can be changed by the user.
Cookies can work in something like user preferences, e.g, the cookie of "background_color" can be set to "red" and it can be changed by the user.
and check "sessions" as well, because they're the ones that keep you logged in.
yes i understand but you need to understand XSS and html injections, xss is enough to stole sessions of users
It's cookies and sessions. It's the same way a normal site does it. Only if you click new identity on Tor Browser it'll delete the session so you'll have to log back in