Implementing cryptographically protected sessions in distributed computing system

A system comprising:

• a memory;
• and
• a processing device coupled to the memory, the processing device to perform operations comprising:
• receiving a first request originated by a client, wherein the first request comprises a first payload and a first cryptographic signature of the first payload;
• attempting to validate, using a stored public key associated with the client, the first cryptographic signature;
• responsive to failing to validate the first cryptographic signature, transmitting, to the client, an invalid session response;
• receiving, from the client, a second request comprising a second payload and a second cryptographic signature of the second payload, wherein the second payload comprises:
• (i) a new public key associated with the client and (ii) a cryptographic digest of an executable script executed by the client in order to apply a predefined transformation to a value of a session state variable;
• validating, using the new public key, the second cryptographic signature;
• and
• responsive to validating the second cryptographic signature, establishing a new session associated with the client.

A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

• receiving a first request originated by a client, wherein the first request comprises a first payload and a first cryptographic signature of the first payload;
• attempting to validate, using a stored public key associated with the client, the first cryptographic signature;
• responsive to failing to validate the first cryptographic signature, transmitting, to the client, an invalid session response;
• receiving, from the client, a second request comprising a second payload and a second cryptographic signature of the second payload, wherein the second payload comprises:
• (i) a new public key associated with the client and (ii) a cryptographic digest of an executable script executed by the client in order to apply a predefined transformation to a value of a session state variable;
• validating, using the new public key, the second cryptographic signature;
• and
• responsive to validating the second cryptographic signature, establishing a new session associated with the client.