[Info-vax] Restful API w/JSON client package or library on OpenVMS

Lawrence D'Oliveiro ldo at nz.invalid
Thu Mar 14 21:31:11 EDT 2024


On Thu, 14 Mar 2024 20:29:21 -0400, Arne Vajhøj wrote:

> A RESTful service is stateless so it cannot keep a
> session server side.

Who says it can’t?

> Frequently the authorizing service
> is different from the authorized service for modern web
> services. Session cookies are not an option in that context.

If a REST client is not a web browser, it doesn’t have to abide by web 
browser security restrictions.



More information about the Info-vax mailing list