News for hackers. Stuff that matters.
Re:Ask HN: Interested in an e-book on building web apps with... by wwalser on Monday December 12, 2016 @12:57AM (#13155919)
I'll be writing up my own experience building auth for askinline.com. I don't know how to keep you in the loop other than saying to follow me on Medium or Twitter.

It's a React + Redux front end with Hapi + Sequelize backend. It uses JWTs in local storage for authentication (that decision will take some defending since it most applications should store it in a cookie) and sometimes uses single uses JWTs for things like email verification. I'm planning to write up how we do Google Login, password based signup and login including email verification and initial load decisions tree for dashboard or login page.

Re:Ask HN: Interested in an e-book on building web apps with... by hawkweed on Monday December 12, 2016 @04:25AM (#13156787)
"most applications should store it in a cookie"

Why do you think that most application should store JWT token in the cookie? Both approaches have their pros/cons.

Re:Ask HN: Interested in an e-book on building web apps with... by wwalser on Monday December 12, 2016 @10:42AM (#13158806)
Cookies have several security features built in and if all you're storing is a session identifier they are generally better than a JWT from a size perspective.

This does a better job that I'm going to try for in a HN comment: http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-fo...