3 ms·
I'd say this heavily depends on your stack. In my experience Django Rest Framework with JWT + Vue or React on the frontend + some JS package that stores and re
by mkl95 5y ago
I'd say this heavily depends on your stack.
In my experience Django Rest Framework with JWT + Vue or React on the frontend + some JS package that stores and refreshes tokens is solid as a rock and easy to implement/maintain. Your end users will never need to know what JWT means and you won't need to do any kind of token management. As far as I know, Instagram's stack is a variant of this.
- seanieb 5y ago7ish years as a security engineer and all my gut instincts tell me that you’re site has auth bugs just from hearing the spec. It might be perfectly secure, but if I was put on your project tomorrow I’d be budgeting weeks to review and work on that auth system. And even then it’s a foot gun waiting for other devs to screw it up later on.
- deleted 5y ago[deleted]
- mkl95 5y agoWhat are you on about? You should know the difference between a short sentence and a spec after 7 years.