3 ms·
Normal auth sends a cookie every request. That is really the same. You have to do state somehow. Sending a token and sending a password are not the same thing.
by dec0dedab0de 3y ago
Normal auth sends a cookie every request. That is really the same. You have to do state somehow.
Sending a token and sending a password are not the same thing.
And I thought basic auth GET requests looked like this: http://username:password@somesite.com http://username:password@somesite.com, did that change at some point?
- detaro 3y agoThat never was the case. That's a syntax to put credentials in a URL if you want to share a link containing the credentials, but has nothing to do with what the requests look like. (your browser also doesn't show it in the URL bar if you access a protected website)
- dec0dedab0de 3y agoYou just blew my mind, thank you for correcting me. I don't know how I've been wrong about this for so long.