3 ms·
As I understand it, it’s when people put the kitchen sink I to claims. Is that a fair single sentence description? Aside, the idea you can set the entire JWT t
by SV_BubbleTime 5y ago
As I understand it, it’s when people put the kitchen sink I to claims. Is that a fair single sentence description?
Aside, the idea you can set the entire JWT to “no security” from a signed packet and have a chance at a server accepting it, is crazy.
- mmazing 5y agoIn our case we only pass a user id (which is public information anyway) and encrypt the token on top of that. I think the encryption isn't necessary but hey why not.