3 ms·
If your using a salt, just change the salt and deploy. We frequently do this and it works great. All existing tokens are expired.
by sudovoodoo 8y ago
If your using a salt, just change the salt and deploy. We frequently do this and it works great. All existing tokens are expired.
- drinchev 8y agoSo you invalidate all tokens? Or it is per user ID salt. If the latter where do you keep the salts and why not simply having a server side session ID, instead of the salt