2 ms·

> JSON RPC tends to embed credentials into the body Really? For a JSON-RPC over HTTP API? Where? If you are using a generic JSON-RPC framework (does that exis

by nsteel 4y ago

> JSON RPC tends to embed credentials into the body Really? For a JSON-RPC over HTTP API? Where? If you are using a generic JSON-RPC framework (does that exist?) which supports multiple transports then credentials in the request object seems like a good optional feature but surely you could disable it and stick your regular HTTP auth middleware in front?