2 ms·

I don't know much about JWTs. Why are they bad?

• zrail 9y ago
  JWT itself is a nice container for signing a small amount of JSON and being able to easily pass that around. I use it a lot for situations where I want to ensure someone hasn't futzed with the data, and/or I want an auto-expiring token of some sort. JWT, by itself, is not an authentication and authorization system, but people often use it as such.