3 ms·
Most of the big companies to my knowledge generally don't depend on client side storage of session state (they might in a few isolated cases, but in general avo
by jsjohnst 10y ago
Most of the big companies to my knowledge generally don't depend on client side storage of session state (they might in a few isolated cases, but in general avoid it).
- hdhzy 10y agoThanks. Google uses interesting approach to handling service accounts: JWT is used as user credential once to get the access token (session credentials) that is reused between requests. https://developers.google.com/identity/protocols/OAuth2ServiceAccount https://developers.google.com/identity/protocols/OAuth2Servi...