Re:Stop using JWT for sessions (2016)
by enraged_camel on Thursday November 01, 2018 @11:07AM
(#18354591)
Exactly, the moment you add statefulness you've basically reinvented session authentication.
[ Parent
| on HN ]
Re:Stop using JWT for sessions (2016)
by Alex3917 on Thursday November 01, 2018 @01:53PM
(#18356577)
There are a lot of problems with storing cookies when the front end and back end are hosted on different domains though. That is the main reason why people use JWTs with SPA apps, because otherwise it wouldn't really be possible to serve the front end from a CDN. Most people using JWTs aren't using them because they're stateless, but rather because it's the only way to solve the problem.