Authenticating REST requests from a headless front end

Could you say more about how you measured the result? I want to try this but I am not sure what success would look like.

Great point. I had not considered the angle you raised in the second paragraph — it reframes the whole thing for me.

This deserves more votes. It is a small change with an outsized impact on day-to-day use.

This is the answer I wish I had found six months ago. Would have saved me a weekend of trial and error.

Could you say more about how you measured the result? I want to try this but I am not sure what success would look like.