GitLab session cookie
ID gitlab_session_cookie
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Session cookie of the GitLab web interface, written as _gitlab_session=<value>. Whoever has the cookie is signed in as the user until the session ends. GitLab documents the cookie name; the regexp follows the gitleaks rule (32 lowercase letters and digits as the value).
- Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 70/100 · missing: examples, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Datadog Sensitive Data Scanner, Gitleaks
Regular expression
^_gitlab_session=[0-9a-z]{32}$Python re syntax.
Examples
| Value | Description |
|---|---|
| _gitlab_session= invalid | Cookie name without the value |
Sources
- doc: https://docs.gitlab.com/security/tokens/
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/gitlab_session_cookie - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/gitlab_session_cookie.yamlon GitHub