News for hackers. Stuff that matters.

A comment on Defining a new HTTP method: HTTP Search (2021). Parent comment

Re:Defining a new HTTP method: HTTP Search (2021) by 2h on Saturday May 27, 2023 @12:37PM (#36096062)
> One advantage of GET is I can just copy the URL and share it.

no, you cant. if the server requires any headers such as Authorization or Cookie, this method will fail.

[ Parent | on HN ]
Re:Defining a new HTTP method: HTTP Search (2021) by johngalt_ on Saturday May 27, 2023 @12:46PM (#36096131)
They are obviously talking about public urls.
[ Parent | on HN ]
Re:Defining a new HTTP method: HTTP Search (2021) by foolfoolz on Saturday May 27, 2023 @01:21PM (#36096446)
it’s extremely to share urls needing auth with people who have the same access levels as you, such as in your company
[ Parent | on HN ]
Re:Defining a new HTTP method: HTTP Search (2021) by ivan_gammel on Saturday May 27, 2023 @01:00PM (#36096263)
Typical scenario is to redirect to login and after successful authentication return back to the requested URL, so the method doesn’t fail if server is implemented correctly.
[ Parent | on HN ]
Re:Defining a new HTTP method: HTTP Search (2021) by hombre_fatal on Saturday May 27, 2023 @01:08PM (#36096340)
It’s not a “no you can’t” just because you know of some exceptions.

And even then, they are still correct while you are not. You can copy the GET url even if it ultimately it requires authentication in a way that you can’t do it all for a POST request.

[ Parent | on HN ]