UnicornBox uses token-based authentication. The database stores a table that maps session tokens to users:
CREATE TABLE IF NOT EXISTS sessions ( username TEXT, token TEXT, -- Additional fields not shown. );
Whenever an HTTP request is received, the server checks for a
value in the cookie. If the cookie contains a token, the server selects the
username corresponding to that token from the
Your task: Gain access to
Tip: Cookie values may contain anything other than semicolons, which are used as delimiters in cookie syntax.