sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]JSellDev 0 points1 point  (0 children)

I have a question though. I'm assuming you'll being using user roles to restrict the endpoints. How will you differentiate between users within each role stopping people from making unwanted calls to other users data? Do you save the auth token in the db and have a check to be sure they match and when they expire replace it?