New answers tagged

0 votes
Accepted

Is it secure to use session ID as authentication token received from an HTTP header?

If implemented correctly, sure, that's secure. Not sure why you went with a custom header rather than Authorization: Bearer, which is a well-established pattern, but it doesn't matter for security. ...
CBHacking's user avatar
  • 46.4k

Top 50 recent answers are included