News for hackers. Stuff that matters.

A comment on Stop using JWT for sessions (2016). Parent comment

Re:Stop using JWT for sessions (2016) by anon1252 on Thursday November 01, 2018 @10:38AM (#18354253)
> and expiring it when you log-out?

and how would you do that if the user doesn't actively log out of a service?

[ Parent | on HN ]
Re:Stop using JWT for sessions (2016) by justaaron on Thursday November 01, 2018 @06:57PM (#18359227)
set the cookie in the response to their next request to you?

specifics depend upon the language and framework used on the server, etc...

[ Parent | on HN ]