Should I delete old session tokens from the database?

Question

Computer networks

Is it customary to remove old session tokens from the database, those that are issued in cookies? How is it accepted? I am a noob and decided to build a small web application on my knee.

Answer 1

Depends on the situation. For example,
- entertainment content providers - not accepted.
- at credit and financial institutions - it is accepted.
If session hijacking harms your client, kill it.