But this results in a header like this: "private, no-cache, max-age=0, must-revalidate".
A neater header that is more standard is "private, no-cache" which will have the effect of stipulating that the cache MUST NOT use the response to satisfy a subsequent request without successful revalidation with the origin server.
You could previously accomplish this by doing something like this
$app->add(new \Slim\HttpCache\Cache('private, no-cache', 0, true));
But this results in a header like this: "private, no-cache, max-age=0, must-revalidate".
A neater header that is more standard is "private, no-cache" which will have the effect of stipulating that the cache MUST NOT use the response to satisfy a subsequent request without successful revalidation with the origin server.