What are .token directories and what are the values in it

[chetanvajre2014]

Just trying to udnerstand the .tokens under user nodes. we've a custom auth handler and those nodes are still populated? Are those session cookie values?

Is there a document that explain what is stored there and when and how is it used?

Thanks.

[Mshaji · Accepted solution]

CQ5 has token authentication and management, It is responsible for issuing new login tokens and validating TokenCredentials passed to the repository login.

You can find more details at

http://jackrabbit.apache.org/oak/docs/security/authentication/tokenmanagement.html