# What part of Litium is depending on ASP.NET\_SessionId

**URL:** <https://forum.litium.com/t/what-part-of-litium-is-depending-on-asp-net-sessionid/1105>\
**Category:** Questions\
**Created:** [September 18, 2019, 3:50pm UTC](https://forum.litium.com/t/what-part-of-litium-is-depending-on-asp-net-sessionid/1105 "2019-09-18T15:50:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Robin.w](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/robin.w/32/75_2.png) [@Robin.w](https://forum.litium.com/u/Robin.w)\
**Post date:** [September 18, 2019, 3:50pm UTC](https://forum.litium.com/t/what-part-of-litium-is-depending-on-asp-net-sessionid/1105/1 "2019-09-18T15:50:16Z")

</div>

We are experimenting with caching and we are going to strip away the cookies for most requests.

We are currently exempting the UserContext eg Cart data, API calls and MyPages and the backend from this cookie strip is there some other part of litium that uses the session information that we need to know about? Do we need to handle \_\_RequestVerificationToken on regular pages like aswell?

Litium version: 7.2

---

<div class="post-metadata">

**Author:** ![patric.forsgard](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/patric.forsgard/32/10_2.png) [@patric.forsgard](https://forum.litium.com/u/patric.forsgard)\
**Post date:** [September 19, 2019, 9:29am UTC](https://forum.litium.com/t/what-part-of-litium-is-depending-on-asp-net-sessionid/1105/2 "2019-09-19T09:29:05Z")

</div>

Everything that is using the target group or price calculations is needing the session. The `__RequestVerificationToken` is used to verifying postbacks and the http-requests by javascript to verify that the sender is valid for that request (to avoid XSS), so when the page is rendered the cookie will be set together with the data that will be passed to the server with either a form-field or the http-header. I haven’t experiment with stripping of the cookie header so I can’t give any recommendation about if it should or shouldn’t work.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex030/uploads/litium/original/1X/12eddac3b8b661de1db86af10ac8151b571e6fb9.png) [@system](https://forum.litium.com/u/system)\
**Post date:** [October 17, 2019, 9:29am UTC](https://forum.litium.com/t/what-part-of-litium-is-depending-on-asp-net-sessionid/1105/3 "2019-10-17T09:29:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.