4 ms·
100% developers leaked JWT token .
by revskill 3y ago
100% developers leaked JWT token .
- lioeters 3y agoAren't JWT tokens supposed to be public?
- hoofedear 3y agoHonest question, in terms of grammar, is JWT token similar to ATM machine? I always feel weird just saying “JWT” and almost always add the “token” part to the end for clarity, is that common?
- lioeters 3y ago> RAS syndrome (where "RAS" stands for "redundant acronym syndrome", making the phrase "RAS syndrome" homological) is the redundant use of one or more of the words that make up an acronym (or other initialism) in conjunction with the abbreviated form. > Many style guides advise against usage of these redundant acronyms in formal contexts, but they are widely used in colloquial speech. https://en.wikipedia.org/wiki/RAS_syndrome https://en.wikipedia.org/wiki/RAS_syndrome
- djbusby 3y agoI try hard to just say "the JWT". But I also try to only say "ATM"
- adhesive_wombat 3y agoBonus points if you pronounce it like a Greek "ω" (joat) or a Welsh "w" (joot)!
- yarg 3y agoThat's omega?
- replygirl 3y agoyou're telling me the w doesn't stand for rapture?
- adhesive_wombat 3y agoDepends. Is your name Wodger or Bwian? Do you have friends in Wome?
- replygirl 3y agoit’s a joke about the new testament.
- adhesive_wombat 3y agoSo is this, indirectly: https://youtu.be/7Lc86JUAwwg https://youtu.be/7Lc86JUAwwg. Though sadly it didn't include the Book of Wevelations.
- replygirl 3y agono, just a play on omega, but thanks for the nostalgia and the laugh :)
- onionisafruit 3y agoI go the other direction and like to say JWT Web Token.
- ben_w 3y ago"Personal PIN Identification Number" is my favourite example.
- taeric 3y agoNo? They are literally your authentication. They are time limited, but still pretty private. Done well, they have an audience set for what they authenticate. Which can limit the exposure back to the issuer. But you are supposed to trust that holding the token means you know who the user is. Right?
- treve 3y agoDepends on the context. JWTs are very often used as a type of session token. So if your token is public, it might allow someone to act on your behalf for whatever service you're using. So while users are allowed to read the token and its contents, you don't want user-identifying tokens to fall in the hands of someone else. You might be thinking of a public key.
- deleted 3y ago[deleted]
- jamietanna 3y agoRelated discussion https://news.ycombinator.com/item?id=24352360 https://news.ycombinator.com/item?id=24352360