Comment

Comment by andychiare

JWTs were never designed for session management. Their primary purpose is to transfer information whose origin can be verified. Period.

The idea that they are related to sessions is, unfortunately, a very common misconception. I wrote an article about this some time ago: https://dev.to/andychiare/sessions-tokens-and-rocknroll-4pdc

parent andychiare 4 months ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton