Why not sending token through headers?

yezyilomo / odoo-rest-api

Module which expose Odoo as a REST API

MIT License

202 stars 162 forks source link

Open muhammadfarizarya opened 3 years ago

muhammadfarizarya commented 3 years ago

Im corious about sending session_id through cookies, why not use headers for sending token to odoo instead? thank you very much

ealmeida1225 commented 3 years ago

Officially says that's for security reasons, but I'm sending the token and it works fine. But maybe my code is more vulnerable of course.