2 ms·

As I read it, the problem is not the mechanism by which a session is maintained, but the very existence of a session at all.

• virmundi 9y ago
  I know that's what people think. But a JWT in a cookie doesn't strike me as worse than basic auth.
• virmundi 9y ago
  I know that's what people think. But a JWT in a cookie doesn't strike me as worse than basic auth.