3 ms·
I agree with you, but that's one of the things that will have to be rewritten if you're in a regulated business - unless you go for some hybrid "JWT but stored
by gpjanik 3y ago
I agree with you, but that's one of the things that will have to be rewritten if you're in a regulated business - unless you go for some hybrid "JWT but stored in the database" which is, basically, not a JWT.
- SgtBastard 3y agoA JWT with a sid claim that RPs use to check session validity is 100% still a JWT with bearer authz claims.