Re: [w3c/ServiceWorker] Authenticated PWA ? (#909)

I do think we need some more recommendations / cookbooks around SW caching and authenticated experiences.

I.e. things like
- API calls by default will be cached as Request-Response pairs if using the `caches` API.
-- That means `Authorization` headers with tokens will be persisted in cache unless developer takes action to delete that header before caching
- Web Crypto for advanced security in IndexedDB / Caches API
- Handling Logout flows
- Multiple signed in users, detecting traffic and keying cache by user ID

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/909#issuecomment-371952160