[Info-vax] Restful API w/JSON client package or library on OpenVMS
Lawrence D'Oliveiro
ldo at nz.invalid
Thu Mar 14 21:31:11 EDT 2024
On Thu, 14 Mar 2024 20:29:21 -0400, Arne Vajhøj wrote:
> A RESTful service is stateless so it cannot keep a
> session server side.
Who says it can’t?
> Frequently the authorizing service
> is different from the authorized service for modern web
> services. Session cookies are not an option in that context.
If a REST client is not a web browser, it doesn’t have to abide by web
browser security restrictions.
More information about the Info-vax
mailing list