Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Stop using JSON Web Tokens for user sessions. Parent comment
Who says you _have_ to? You could set a jwt as an httponly cookie and use it to exclusively validate API requests in your backend.
There are no comments on this comment yet.
Who says you _have_ to? You could set a jwt as an httponly cookie and use it to exclusively validate API requests in your backend.