3 ms·
A vanishingly small minority of projects need the ability to instantly revoke a token on every HTTP request. And even then there is nothing stopping you from d
by spookthesunset 7y ago
A vanishingly small minority of projects need the ability to instantly revoke a token on every HTTP request. And even then there is nothing stopping you from doing so with JWT.
Know your facts. And YAGNI and all that...
- eropple 7y ago"Logout all my sessions" is basic decency towards your user. I get that it's hard with your bloggable thing, but it's better for the people on the other end.