gist.github.com
Stop using JWTs
A concise argument against using JWTs in user authentication.
About Stop using JWTs
Stop using JWTs argues that JWTs are unsuitable for user sessions and advocates cookie-based sessions; it also mentions PASETO as a secure alternative. References to talks and articles are provided.
Categories
Topics
Published
Discussion highlights
AI-generated summary based on Hacker News comments
🔗 Full discussion: https://news.ycombinator.com/item?id=48558147
No comments yet. Have you tried it?