News for hackers. Stuff that matters.

A comment on Ask HN: What do you use for authentication and authorization?. Parent comment

Re:Ask HN: What do you use for authentication and authorizat... by icebraining on Thursday December 27, 2018 @06:30AM (#18768889)
He suggests KISS: you can probably get away with plain old server-side auth, and if you really need client-side tokens, use something simple that just encrypts and signs them: https://news.ycombinator.com/item?id=13612941#13615634
[ Parent | on HN ]
Re:Ask HN: What do you use for authentication and authorizat... by Aeolun on Thursday December 27, 2018 @11:34AM (#18770483)
> Something simple that just encrypts and signs them

Like JWT?

I feel like that argument goes around in circles.

[ Parent | on HN ]
Re:Ask HN: What do you use for authentication and authorizat... by icebraining on Thursday December 27, 2018 @12:57PM (#18771136)
tptacek's point is that JWT is not simple at all:

https://news.ycombinator.com/item?id=13866983

https://news.ycombinator.com/item?id=14292223

[ Parent | on HN ]
Re:Ask HN: What do you use for authentication and authorizat... by geezerjay on Thursday December 27, 2018 @12:11PM (#18770794)
> I feel like that argument goes around in circles.

I feel that the problem is that some users are talking about stuff they know nothing about, but still feel compelled to be very vocal and opinionated.

[ Parent | on HN ]