epitome

epitome copied to clipboard

Why do you use the X-Session-Token: TOKEN instead of Authentication: Basic TOKEN?

Because it's not Basic Auth (in the strict sense), and it will be replaced by the Hawk scheme in the near future anyway.

Speaking of which, that will be done in combination with one of the methods described here. I'd love your input on this (if you want, you can move this discussion over to the mailing list: [email protected]).