3 ms·
What if i use JWT and thus have no concept of 'session' resources? You would actually create a token using username and password.
by rahkiin 10y ago
What if i use JWT and thus have no concept of 'session' resources? You would actually create a token using username and password.
- jackcosgrove 10y agoMy critique with POST /login is that it's a verb, not a noun. Whether the session is stored on the server or the client is the same regardless of the verbiage. In both cases a client-side session is a bit of semantic abuse but HTTP does not have verbs for creating resources on the client. I think a JWT token represents a session, since it can expire and be disposed when logging out.