2 ms·
Like anything else it depends. JWTs are still great. Just don’t treat it like a classical session and dump important information in it. You could also use sess
by navd 9y ago
Like anything else it depends. JWTs are still great. Just don’t treat it like a classical session and dump important information in it.
You could also use session like you always have if the SPA is being served by the same server.
- snuxoll 9y agoJWT is at the heart of OpenID connect, I agree they’re still perfectly reasonable. The big issue I have with JWT is they are hard to invalidate for security reasons, but if you lower the validity and refresh the token more often you can mitigate (not eliminate) the risk.