News for hackers. Stuff that matters.

A comment on JSON Web Tokens vs. Sessions. Parent comment

Re:JSON Web Tokens vs. Sessions by vmarsy on Saturday June 18, 2016 @03:08PM (#11930096)
Could this be an issue if you try passing the refresh token as well? Is there some limit for the length of a GET request parameters?
[ Parent | on HN ]
Re:JSON Web Tokens vs. Sessions by wtbob on Sunday June 19, 2016 @09:32AM (#11932908)
There are practical limits, but lightweight JWTs won't run up against them. Heavyweight ones would, of course.
[ Parent | on HN ]