JSON Web Tokens vs. Sessions

Re:JSON Web Tokens vs. Sessions by jcoffland on Sunday June 19, 2016 @08:13PM (#11935407)

Searching a revocation list misses the point of RESTful authentication.

[ Parent | on HN ]

Re:JSON Web Tokens vs. Sessions by zimbatm on Monday June 20, 2016 @05:42AM (#11937037)

There is no such thing as a RESTful authentication. REST's design hinges on URIs being public.

[ Parent | on HN ]

Re:JSON Web Tokens vs. Sessions by jcoffland on Friday June 24, 2016 @03:52AM (#11967636)

What do public URIs have to do with it? I don't think we are speaking the same language.

[ Parent | on HN ]