Candidate sessions
The atsai_candidate_session cookie identifies a signed-in candidate account. It is HttpOnly, SameSite=Strict, Secure in production, and expires after eight hours.
The cookies used for account sessions.
The atsai_candidate_session cookie identifies a signed-in candidate account. It is HttpOnly, SameSite=Strict, Secure in production, and expires after eight hours.
The atsai_admin_session cookie identifies staff workspace sessions with the same protection settings. Staff and candidate sessions are separate.
Signing out removes the account session cookie. You can also clear cookies in your browser. Blocking these cookies prevents account sessions from working.