4 ms·
JWT is one of the worst things that came out of the JS frontend ecosystem and spread everywhere. It made working with services so much more cumbersome in the na
by rednafi 2y ago
JWT is one of the worst things that came out of the JS frontend ecosystem and spread everywhere. It made working with services so much more cumbersome in the name of security.
Then people started using it to carry contextual information, and now it’s pretty common to see ginormous tokens being sent out in every S2S call.
Also, everyone loves working with obnoxiously short token refresh time.
- donatj 2y agoThe number of times I have had to remind a developer that the contents of the JWT are readable is nuts. Way too often they want to treat it like a general session store and just toss any old state in there regardless of if the end user should be able to see the value.