4 ms·
Users get compromised though and will want to revoke sessions. But this is why you just set a time limit on your JWT, so that they can revoke and within N minut
by staticassertion 7y ago
Users get compromised though and will want to revoke sessions. But this is why you just set a time limit on your JWT, so that they can revoke and within N minutes the old sessions will die. Just keep N low.
- wcip 7y ago>Just keep N low. "Your self driving car has been compromised, but don't worry sir the attackers will relinquish control at some point in the next 30 seconds" In my view JWT are fine so long as you don't really care about whatever is they are being used for.