The truth about cookies, tokens and APIs - Phillipe de Ryck

[@jayshah5695]

Great explaination

[@parthapal8380]

In this presentation Philippe clears a confusing concept of reference token and self contained token flows

[@hasparus]

22:50 I don't how hard can it be to send an API's authorization header only to the API that the token belongs to. Couldn't we ignore Angular if it makes stuff so hard? Calling the endpoint with proper headers using Vanilla.js Fetch API is pretty straightforward.