token

Security

Authentication session token (JWT) used to identify the logged-in user and authorise requests to the API. Set on login and cleared on logout.

1 hour

csrfToken

Security

Used to prevent Cross-Site Request Forgery (CSRF) attacks. Validated on form submissions and API requests.

Session

callbackUrl

Functional

Stores the URL the user should be redirected to after a successful login.

Session

ck

Functional

A unique identifier (UUID) used to store and retrieve the user's shopping basket from the server-side cache.

1 hour

ck_p

Functional

Temporarily holds the primary patient's basket cache key when the user switches to managing a dependent's profile. Deleted once the switch is complete.

Temporary

ck_d_[id]

Functional

Temporarily holds a dependent patient's basket cache key when the user switches back to their primary profile. Deleted once the switch is complete.

Temporary

promocode

Functional

Stores the details of a promotional code applied to the basket. Deleted automatically when an order is successfully placed.

1 hour