Why store Token in Cookie and send it in Authorization Bearer Header?
pasestars opened this issue · 1 comments
pasestars commented
Why store Tooken in Cookie, after that send token over Authorization Bearer Header?
It sends duplicate Token in Header: Authorization and Cookie when the domain of FE and BE is the same.
pany-ang commented
Yes, this is done just to be compatible with both ways, just a defensive programming