Web application session security

A method of secure communication between a web application and a server computing device, the method comprising:

• receiving, by a session identifier routine executing at a computing device, a first request message comprising a session identifier field, the session identifier field comprising a client session identifier describing a communication session between the web application executing at the computing device and the server computing device;
• accessing, by the session identifier routine, session identifier transformation data from a session vault persistence of the computing device;
• transforming, by the session identifier routine, the client session identifier to a server session identifier using the session identifier transformation data;
• writing, by the session identifier routine, the server session identifier to the session identifier field of the first request message;
• and
• initiating, by the session identifier routine, sending the first request message including the server session identifier to the server computing device.

A machine-readable medium comprising instructions stored thereon that, when executed by at least one processor, causes the at least one processor to execute operations comprising:

• receiving, by a session identifier routine executing at a computing device, a first request message comprising a session identifier field, the session identifier field comprising a client session identifier describing a communication session between the web application executing at the computing device and a server computing device;
• accessing, by the session identifier routine, session identifier transformation data from a session vault persistence of the computing device;
• transforming, by the session identifier routine, the client session identifier to a server session identifier using the session identifier transformation data;
• writing, by the session identifier routine, the server session identifier to the session identifier field of the first request message;
• and
• initiating, by the session identifier routine, sending the first request message including the server session identifier to the server computing device.