title: Should an API server be stateless for an Android app?
body: <p>I am creating a Restaurant reviewing app. There will be a Spring Boot API server as it's backend.
  I can easily set stateless property in Spring Security as:</p>
  <pre><code>http.sessionManagement()
              .sessionCreationPolicy(SessionCreationPolicy.STATELESS);
  </code></pre>
  <p>Now what is the best practice for this? Should it be stateful or stateless?</p>
  <p>If it should be stateless then every http api call needs to be reauthenticated right? (I mean app needs to send user name and password).</p>
  <p>Thanks.</p>