alt Hacker NewsWhat do you recommend then? What technology has been designed, completed, then used for years without any updates or problems?
Replies
tptacek • today at 1:00 AM
https://fly.io/blog/api-tokens-a-tedious-survey/
tl;dr: most of the time you should use opaque random strings.
Bearer tokens are a dead end? You have to validate them anyway so traditional auth is the fallback.