treechicken@lemmy.world to Programmer Humor@lemmy.ml · 7 months agoSPAs were a mistakelemmy.worldimagemessage-square12fedilinkarrow-up127arrow-down10
arrow-up127arrow-down1imageSPAs were a mistakelemmy.worldtreechicken@lemmy.world to Programmer Humor@lemmy.ml · 7 months agomessage-square12fedilink
minus-squareAVincentInSpace@pawb.sociallinkfedilinkEnglisharrow-up1·edit-27 months agoOkay. So make your webpage send the authtoken in a cookie and leave off the Authorization header, and have your third party (presumably native) clients send an Authorization header but not any cookies, and write your server software to check for both. This seems trivial. What am I missing?
Okay.
So make your webpage send the authtoken in a cookie and leave off the
Authorizationheader, and have your third party (presumably native) clients send anAuthorizationheader but not any cookies, and write your server software to check for both.This seems trivial. What am I missing?