3 ms·
Locking jwt to IP breaks mobile auth where you may be hopping between wifis and 4g. Agreed with the rest of your post
by scrollaway 7y ago
Locking jwt to IP breaks mobile auth where you may be hopping between wifis and 4g. Agreed with the rest of your post
- netsectoday 7y agoYes, you are right. You need to balance that tradeoff with your application/business risk profile. High-security applications or those not tailored for mobile can still lock the IP to the JWT.