New answers tagged web-service
0
I thought about this and the answer is no. It is not possible to decide the identity of the consumer by pure SPA clients. Even if I have fully trusted consumers where the users can register and login, it is better not to share the user accounts between them, because that way a compromised consumer can send requests in the name of any other consumer simply by ...
Top 50 recent answers are included
