On Tuesday, March 21, 2017 at 6:27:01 PM UTC, Mark Hamburg wrote:
>
> P.P.S. If you want your mind more deeply twisted, here is what we do when 
> we want to store the auth token fairly high up but a piece of code needs it 
> for constructing an HTTP request:
>

Why not use a secure cookie? Then the browser adds it to the request for 
you. It is also more secure and has the advantage that if the user 
CTRL+clicks a link in your application opening up the same application in 
>1 tab, that the cookies flow across automatically.

-- 
You received this message because you are subscribed to the Google Groups "Elm 
Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to