Replying to this because it actually gets crazier. I just checked what it takes to implement this using packages like react-native-nitro-cookies. Omo... I have to drop standard global fetch and route all my network calls through a custom native wrapper. Just to read one header. 😭💀
Mind you, We were returning both tokens in the body before and it worked perfectly. But bro started a new "big fintech" job and decided to force their web setup on our mobile codebase.
This isn't "The Fintech Standard”…it's bad architecture.
Ripping up an app's core networking layer because someone can't drop their web habits is wild. APIs should be client-agnostic.
Forcing a native app to cosplay as a web browser isn't security, it's just engineering debt. Change my mind 🚶♂️☕
Backend devs, abeg make una help me settle this debate. Am I doing too much?
A backend dev I’m working with is returning the access token in the JSON response body but putting the refresh token in a Set-Cookie header.
He’s swearing with his full chest that this hybrid split is “the enterprise fintech standard” because that’s how they do it at a big fintech company he works with 😭
But to me, cookies belong on the web. At the end of the day, the goal is just to get the token value and drop it in secure storage (Keychain/Keystore).
Because this is React Native, network fetches generally return undefined for the Set-Cookie header out of the box…mobile OS doesn’t work like a browser 💀 I now have to install a separate native cookie manager just to extract a token that should have been in the JSON body from day one.😭
I told him his big fintech company probably did this as a lazy shortcut because they started as a web platform and carried over legacy code, but he’s not trying to hear it 🚶♂️🤦♂️
Why the unnecessary stress? Is there an actual security rule that one token must go in the body and the other in the header for mobile apps, or is this just overengineered backend architecture forced on me?
Being a "backend engineer" is not a skill.
It's a department.
Moniepoint posted roles, struggled to find qualified Nigerians, and Nigerians on the internet showed their displeasure.
But still, nobody touched the actual problem.
This thread will make some of you uncomfortable.
That's fine.
It's only a problem for people who don't read with an open mind.
I’ve got a new EP out 29th October & it’s Called “Maison Rouge” named after the Villa in 🇧🇯 Where I recorded the Project.
This one’s special cos it was unplanned and 100% vibes & Banku Music.
https://t.co/EIt2QZEh5F