4 ms·
If you’re using a cookie to store the JWT, you don’t really need to check the auth header.
by thosakwe 8y ago
If you’re using a cookie to store the JWT, you don’t really need to check the auth header.
- jordache 8y agoif you're wrapping the JWT in a cookie, then it's effectively a session cookie. In that case, the client side difference between JWT and session cookies are effectively moot.