4 ms·
The biggest problem with JWT is there is no revocation mechanism which IMHO is a non-starter. Introducing revocation mechanisms generally means introducing cent
by latortuga 7y ago
The biggest problem with JWT is there is no revocation mechanism which IMHO is a non-starter. Introducing revocation mechanisms generally means introducing central state and now you're back to why not just use a session token? Not to mention the numerous issues JWT has had over the years.