News for hackers. Stuff that matters.
Re:Ask HN: What's the current sentiment on JWT for stateless... by kelnos on Saturday December 14, 2019 @02:42AM (#21788337)
I guess the idea is that it's "stateless" in the sense that you don't have to maintain the state yourself, and the CDN will do it for you? I mean... okay, I guess the point of being stateless is that you don't want to deal with the scaling and reliability issues around storing state, so pushing that responsibility onto a third party (whose uptime is required to get to your site anyway) is "stateless" from your perspective.

I certainly wouldn't call that "stateless", but it does fulfill the main reason why you might want to be stateless, that you don't have to maintain any state yourself.

Re:Ask HN: What's the current sentiment on JWT for stateless... by jakelazaroff on Saturday December 14, 2019 @11:32AM (#21790311)
Exactly — it's basically the same as writing your own separate authentication service, or using Auth0/Cognito/Firebase.
Re:Ask HN: What's the current sentiment on JWT for stateless... by notyourday on Saturday December 14, 2019 @08:35AM (#21789429)
The reason why it is stateless is because there's no state associated with a token that I have to maintain.