jacopofar2
Joined 9 years ago
Karma
37
Submissions
6
Member since
Dec 30
https://github.com/jacopofar
View on Hacker NewsRecent submissions
Comment · 7 years ago
Is it my impression or lately there's a boom of generated sites? Like https://pirolisi.ml/ or Polygen
Comment · 9 years ago
Except for that DAO of last summer, in that case the law changed...
Comment · 9 years ago
Have you tried it in production? It would be nice to have a feedback from a DBA
Comment · 9 years ago
The "none" algorithm set in header is a well known problem and, for example, nodejs most used library automatically uses asymmetric keys when one is given, ignoring the header (https://github.com/auth0/node-jsonwebtoken/blob/master/verif...)
As long as the problem is known to the developers and the key is specified, I think the biggest issue of JWT is the lack of session invalidation (that is, if you log out your already emitted tokens are still valid until their expiration), but it's a good tradeoff for not having server sessions.
Comment · 9 years ago
Wrong link, it was https://github.com/jacopofar/markov-avro-tools