I would think a "Pre-auth" endpoint that can be called for user information is n... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		hirsin on July 25, 2019 \| parent \| context \| favorite \| on: How not to sign a JSON object I would think a "Pre-auth" endpoint that can be called for user information is not what consumers want...

lvh on July 25, 2019 [–]

I mean pre-auth in that you pass it a JWT with a shared credential that it parses for you, as opposed to an explicit auth'd credential.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact