Hacker News new | ask | show | jobs
by bpicolo 2734 days ago
I think the distinction is that, if you intend to have a publicly accessible API, tokens are preferred vs cookies. For your own mobile clients, doesn't matter
1 comments

Why are tokens preferred over cookies for a publicly accessible API?
There are all sorts of cases where managing cookies is annoying when interacting with an API, like via curl. There might be other reasons as well, but making consumption easy is probably reason enough