5 ms·
How is a magic url really any different from a magic login cookie in this case? Yeah, I guess you can't revoke it, but what's the difference if the new cookie/u
by kyle-rb 5y ago
How is a magic url really any different from a magic login cookie in this case? Yeah, I guess you can't revoke it, but what's the difference if the new cookie/url is equally unguessable?
- prepend 5y agoI create and revoke tokens, that’s a big difference. With magic urls, I don’t know they exist so I can’t share or control them.