3 ms·
Oh yes, UX is definitely a concern, but I was more worried about the security implications of it. Also, users are so accustomed to form-based logins that a moda
by boramalper 8y ago
Oh yes, UX is definitely a concern, but I was more worried about the security implications of it. Also, users are so accustomed to form-based logins that a modal dialog from the browser might even freak some out.
Now thinking about it, I think two-factor authentication would also be impossible with Basic Auth, and surely that’s a legit security concern.
For the record, my app is a small self hosted solution so changing your password is as simple as updating a credentials file and sending a SIGHUP to the daemon.
- eb0la 8y agoWith http cretentials, if you change your password while authenticated you'll get a 403 . Form+Session[Cookie||LocalStorage] is much more flexible.
- boramalper 8y agoWouldn't refresh work?