News for hackers. Stuff that matters.

A comment on Ask HN: What's the current sentiment on JWT for stateless auth tokens?. Parent comment

Re:Ask HN: What's the current sentiment on JWT for stateless... by mikeymz on Saturday December 14, 2019 @05:13AM (#21788735)
Rather than blacklist JTIs would it not be simpler to keep a valid after date on the user? Any token issued before that date is not acceptable
[ Parent | on HN ]
Re:Ask HN: What's the current sentiment on JWT for stateless... by mgraczyk on Saturday December 14, 2019 @04:59PM (#21792584)
Then you can't have users sign out of device A while remaining signed into device B.
[ Parent | on HN ]