News for hackers. Stuff that matters.
Re:JSON Web Tokens should be avoided by throwaway2016a on Tuesday March 14, 2017 @09:56AM (#13867478)
> expiry header

JWT tokens have the expiration date embedded in the token. There is no way to force it to expire like you you can with cookies.

Although force is a strong word. Even with cookies if you tell the client to delete a cookie it doesn't mean it has to listen.

There are no comments on this comment yet.