Hacker News new | ask | show | jobs
by nerdkid93 1865 days ago
I believe refresh tokens are supposed to be HTTP Only