DEV Community

Discussion on: What really is the difference between session and token based authentication

Collapse
 
webdevopsfresher profile image
webdevops-fresher

Even if a user tampers a token stored on client side,the server will compare the token sent with each subsequent request with it's secret key.

Collapse
 
saidbakr profile image
Said Bakr

@goose97 @webdevopsfresher
_It is too late, but thank you for your reply. _
This may explain why such kinds of authentication need the HTTPS? I think, to add encryption as an additional security layer between the client and the server.