245
SPAs were a mistake (lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
[-] lemmyvore@feddit.nl 1 points 9 months ago

That's assuming the client wants to make a web app. They may need to connect something else to that API.

It's perfectly normal to be able to cater to more authentication scenarios than "web app logging in directly to the target API and using its cookies".

If they want to make a web app they should use the cookie mechanism but ultimately each client app is responsible for how it secures its access.

this post was submitted on 12 Dec 2023
245 points (95.9% liked)

Programmer Humor

32050 readers
1597 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS