|
|
|
|
|
by coldtea
752 days ago
|
|
Why would it be "lethal"? As a dev you're either building or hooking up to either or both of them. And you know what each requires you to build / hook up to. As a user, you just care "I put my login/password/api key here, and I get the capability to do several things in that webpage/service/etc". Both auth and the other auth are handed for you. |
|
And if the other dev made an error and confused authorization and authentication you have a problem.
Stupider mistakes have been made and it is a sign of overconfidence if you think you are immune to them.