Comment

Comment by tmikaeld

Was about to write a rant that it's still not better than cookies & sessions, something that has been standard waay longer than JWT.

But this video says all I have to say (2018):

https://www.youtube.com/watch?v=JdGOb7AxUo0

1 sec takeaway (More in the video):

https://i.imgur.com/vUYTYfS.png

That said, JWT's are great for stuff like 2-Factor via email link or redirecting from one domain to another. Single use, which it was built for.

parent tmikaeld 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton