3 ms·

I would be very surprised if this is how it works

• solomone 12y ago
  me too.. it's more likely to be a token that's cookied and sent over SSL per api request. Same token that would get generated if they auth'ed via password.