3 ms·
No mention of the biggest single problem with REST as it's practiced: POST /login. You should use POST /session instead.
by jackcosgrove 10y ago
No mention of the biggest single problem with REST as it's practiced: POST /login.
You should use POST /session instead.
- rahkiin 10y agoWhat if i use JWT and thus have no concept of 'session' resources? You would actually create a token using username and password.
- jackcosgrove 10y agoMy critique with POST /login is that it's a verb, not a noun. Whether the session is stored on the server or the client is the same regardless of the verbiage. In both cases a client-side session is a bit of semantic abuse but HTTP does not have verbs for creating resources on the client. I think a JWT token represents a session, since it can expire and be disposed when logging out.
- bschwindHN 10y agoIt's all made up words anyway, who really cares?