Do sessions really violate RESTfulness?

Is using sessions in a RESTful API really violating RESTfulness? I have seen many opinions going either direction, but I’m not convinced that sessions are RESTless. From my point of view: authentication is not prohibited for RESTfulness (otherwise there’d be little use in RESTful services) authentication is done by sending an authentication token in the … Read more