News for hackers. Stuff that matters.
Re:Revoking JWTs (JSON Web Tokens) by robotdan on Thursday January 31, 2019 @03:15PM (#19048356)
I'd say it is always good to have options. If sessions work, that is a safe option and easy to manage state.

If at scale this option doesn't work - or at least not as well as you'd like, additional strategies are good to know.

If you plan for Pokemon Go, or Fornite scale, decoupling may be beneficial. Admittedly this is a small percentage of all of the use cases.

There are no comments on this comment yet.