News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided. Parent comment

Re:JSON Web Tokens should be avoided by rblatz on Tuesday March 14, 2017 @10:38AM (#13867796)
What if you are running dozens of services each specializing in its own domain? Do you proxy each service through a pool of central webservers? Or do you just stand up a central auth server and have each service trust that auth server?
[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by Chris2048 on Wednesday March 15, 2017 @10:52AM (#13876481)
The latter makes sense to me. Auth is a cross-cutting concern.
[ Parent | on HN ]