Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm not seeing why there's a clear line where GET cannot be authentication but POST can.


Because there isn't a line? You can require auth for any of those HTTP methods. Or not require auth for any of them.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: