Reputation:
I can use JavaScript to construct custom requests using my token, jQuery example
$.ajax({
url: "/page",
type: 'GET',
headers: {"Authorization": 'Bearer ' + localStorage.getItem('token')}
});
To get the page at /page
which may require authentication to do.
But what if I have in my page a link
<a href="/page"></a>
The user is already authenticated, there is a token in localStorage
.
How can I set it up so that clicking on the link loads a new webpage as usual, but tell the server Authorization: Bearer ...
in the header of that request so the server knows the request is authentic?
Upvotes: 1
Views: 5433
Reputation: 1226
You can't specify headers in browser navigation. If you need to authenticate when the user visits the page, you should create a cookie.
Cookies get sent in all requests. Storing your authentication token there would do what you need.
Upvotes: 4