Re:JSON Web Tokens vs. Sessions
by digitalpacman on Sunday June 19, 2016 @04:04AM
(#11932214)
It's so that if the JWT is stolen in transit, the thief only has access to the token for a shorter period of time. This is why they should expire quickly. Whether or not you think that matters, is not up for debate. That's how it is.
[ Parent
| on HN ]
There are no comments on this comment yet.