3 ms·
Why can't you just change the secret on the server? It would invalidate all sessions.
by natelaporte 11y ago
Why can't you just change the secret on the server? It would invalidate all sessions.
- rashkov 11y agoThanks for pointing that out. That's a good technique and it addresses a large concern about jwt that this article raised for me. I suppose it's still a problem with invalidating individual sessions but that's a smaller problem.