3 ms·
If you're authenticating with a username and password on every request you're doing something wrong. Once a user is logged in you should be setting a cookie, se
by stanmancan 12y ago
If you're authenticating with a username and password on every request you're doing something wrong. Once a user is logged in you should be setting a cookie, session, or some other token to identify the user.
- ryan-c 12y agoI believe HTTP basic auth checks the username and password on every request. It's pretty rarely used these days though.
- artursapek 12y agoOnly for secret admin tools :D
- giaour 12y agoA fair number of APIs offer basic auth, even in 2015.
- carbocation 12y agoHell, the Reddit API uses basic auth in 2015.
- stanmancan 12y agoYikes... I guess I've been pretty lucky with the API's I've had to work with in the past, I can't recall ever coming across this.