3 ms·
This says why not to use JWT for sessions. JWT aren't meant for sessions. This article is not an argument against JWTs. Very misleading tittle.
by rowanG077 7y ago
This says why not to use JWT for sessions. JWT aren't meant for sessions. This article is not an argument against JWTs. Very misleading tittle.
- mvid 7y agoI’ve only ever heard of JWT recommended in the context of “database free sessions”
- rowanG077 7y agoJWT has nothing to do with sessions. It's a stateless authorization mechanism. I actually have never seen it used in production as a substitute for sessions. Can you show examples of production software that uses JWT as a substitute for session?