Hacker News new | ask | show | jobs
by bornfreddy 345 days ago
Agree with most of what you said, except about HTTP Basic auth. That is used everywhere - take a look at any random API and there is roughly 90% chance that this is the authentication mechanism used. For backends which serve a single frontend maybe not so much, but still in places.
2 comments
motorest 345 days ago
> That is used everywhere - take a look at any random API and there is roughly 90% chance that this is the authentication mechanism used.

I have no idea where you got that idea from. I'm yet to work in a project where any service doesn't employ a mix of bearer token authentication schemes and API keys.

link
fiedzia 345 days ago
I've found recently that CORS doesn't work with it, which kills it for a lot of usecases.
link