News for hackers. Stuff that matters.

A comment on Ask HN: What's the current sentiment on JWT for stateless auth tokens?. Parent comment

Re:Ask HN: What's the current sentiment on JWT for stateless... by msbarnett on Friday December 13, 2019 @02:42PM (#21784669)
You need a really short refresh cycle for that to be useful to customers. If your customer FooCorp fired Bob, they want to be able to disable his access immediately, not in 3 days when his access token next needs a refresh.
[ Parent | on HN ]
Re:Ask HN: What's the current sentiment on JWT for stateless... by jayd16 on Friday December 13, 2019 @03:39PM (#21785223)
15 minutes seems to satisfy most use cases.
[ Parent | on HN ]