News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided. Parent comment

Re:JSON Web Tokens should be avoided by Alex3917 on Tuesday March 14, 2017 @04:39PM (#13871270)
For most web frameworks, the user model gets retrieved from the db automatically whenever an authenticated request is made. So there is no extra lookup.
[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by igl on Wednesday March 15, 2017 @03:45AM (#13874466)
Oh man.

Proponents say critics dont offer alternatives at the same time they always literally 'reverse' engineered sessions if you dig deep enough.

I give up. JWT is just a hip thing to do right now. :(

[ Parent | on HN ]