DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
API Development
Why is it recommended that a well-designed system commonly uses BOTH session cookies and bearer tokens, rather than picking just one universally?
A
Using both is never actually recommended
B
Different client types have different needs — a first-party web app benefits from cookies' automatic attachment, while mobile apps/server-to-server/third-party consumers lack a browser cookie jar and fit bearer tokens naturally
C
Bearer tokens are always required by law for API access
D
Cookies cannot be used for any authentication purpose
Check Answer