News for hackers. Stuff that matters.
Re:Ask HN: What do you use for authentication and authorizat... by throwawaymath on Thursday December 27, 2018 @11:15AM (#18770329)
What you’re describing - a microservice architecture - is actually a legitimate use case for JWT. I would say that’s an example of sound authentication, but it’s not session authentication, which is what’s being talked about here. Microservices authenticating and communicating with one another don’t utilize the concept of sessions in the sense that clients (users) and servers do.

For that reason I don’t know that it’s fair to say the disagreement throughout this thread is due to people talking about different things. Microservice authentication notwithstanding, session management is not optimally handled by JWT.

There are no comments on this comment yet.