this post was submitted on 12 Dec 2023
249 points (96.3% liked)

Programmer Humor

32031 readers
1280 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 5 points 9 months ago* (last edited 9 months ago)

Basically it means that the API calls won't work in a browser and would only realistically work in things like Python scripts.

If API calls are being handled by JavaScript in the browser, they're going to run into issues, because the HttpOnly flag means the JavaScript code can't read the auth token.

Things like Python scripts have no such limitations though, so this can be used in cases where you aren't expecting an actual browser.