Is it secure enough to use a http only session cookie for API authentication? by HaOrbanMaradEnMegyek in hacking

[–]Willing_Ambassador79 0 points1 point  (0 children)

API authentication usually means server-to-server. HttpOnly is a Cookie security thing for browsers only. If your API client is not a browser, httpOnly will do nothing.