Guide to Auth Tokens

1.1 Why do we need tokens at all? HTTP is stateless. Every request arrives with no memory of the one before it, so the server has no idea that the person calling /api/orders is the same one who logged