News for hackers. Stuff that matters.

A comment on Stop using JWT for sessions (2016). Parent comment

Re:Stop using JWT for sessions (2016) by anon1252 on Thursday November 01, 2018 @12:40PM (#18355792)
> Ok, yes, session is a concept. Session state can be stored in its entirety or split between an ID and body.

the storage of session has absolutely nothing to do with the session. I'm not sure why you keep talking about Cookies it has nothing to do with the problem. JWT can be persisted with cookies as well.

[ Parent | on HN ]
Re:Stop using JWT for sessions (2016) by manigandham on Thursday November 01, 2018 @12:44PM (#18355832)
Yes, my original and last comments already said exactly that... I'm not sure what you're arguing at this point.
[ Parent | on HN ]