Hacker News new | ask | show | jobs
by jmulho 3072 days ago
Is there any reason to favor bearer tokens over cookies?
1 comments
tboyd47 3072 days ago
If you use a cookie for an API, it will look like you don't know what you are doing. Also, there are extra rules around Cookies (expiration, length, etc.) that may bite you if you use them outside a browser context.
link
jmulho 3071 days ago
Ah, so there are other contexts (e.g. native mobile apps) that may be sharing the API, not just browser (web) apps. I think I get it. Thanks.
link