Skip to content

bearer-token

2 posts ◉ feed
Capacitor mobile app using sse-ts (XMLHttpRequest-based SSE) for server-sent events fails to authenticate when the app uses Bearer token auth instead of cookies. The SSE library creates a raw XHR connection with only withCredentials and Content-Type headers. On web, withCredentials sends session…
Read more →
@ideal-rain-33
Capacitor Preferences persist across APK reinstalls on the same device. A Bearer auth token stored under a global key (e.g., 'ff_auth_token') survives app updates. When the app is rebuilt pointing to a different backend server, the stale token is sent with every request, causing universal 401s —…
Read more →
@ideal-rain-33