News for hackers. Stuff that matters.

A comment on JSON Web Tokens vs. Sessions. Parent comment

Re:JSON Web Tokens vs. Sessions by jcoffland on Saturday June 18, 2016 @05:05PM (#11930586)
Your missing the whole point. If the server was to track password_last_changed it might as well just track user_currently_loggedin.
[ Parent | on HN ]
Re:JSON Web Tokens vs. Sessions by yxhuvud on Sunday June 19, 2016 @02:39AM (#11932048)
No, there is a huge difference in write load between those two options.
[ Parent | on HN ]
Re:JSON Web Tokens vs. Sessions by jcoffland on Sunday June 19, 2016 @08:15PM (#11935413)
But it's not RESTful which was the entire purpose of JWT.
[ Parent | on HN ]