News for hackers. Stuff that matters.

A comment on Ask HN: What's the recommended method of adding authentication to a REST API?. Parent comment

Re:Ask HN: What's the recommended method of adding authentic... by thijsvandien on Wednesday January 17, 2018 @06:42AM (#16167125)
It was my impression that the token is obtained by supplying username and password to a login API, through which it can also be replaced when it expires. Now it seems that I was wrong. How do you suggest the token be managed?
[ Parent | on HN ]
Re:Ask HN: What's the recommended method of adding authentic... by tptacek on Wednesday January 17, 2018 @11:14AM (#16169057)
You can do that, or you can just have a page in the application where the user manually fetches a new API token, which is a pretty common UX for this.
[ Parent | on HN ]