this post was submitted on 12 Dec 2023
245 points (95.9% liked)

Programmer Humor

32427 readers
820 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 11 months ago* (last edited 11 months ago)

Basically it means that the API calls won't work in a browser and would only realistically work in things like Python scripts.

If API calls are being handled by JavaScript in the browser, they're going to run into issues, because the HttpOnly flag means the JavaScript code can't read the auth token.

Things like Python scripts have no such limitations though, so this can be used in cases where you aren't expecting an actual browser.