Re:JWT should not be your default for sessions
by adolph on Wednesday May 12, 2021 @09:41PM
(#27137492)
The persisted state of user access can be two of consistent, available and partition tolerant. JWT uses cryptography to expand partition tolerance at the expense of consistency. The lower the requirement for consistency latency in user state, the lower partitions are tolerated, such as geographic availability, multi-rack, multi process and so on down to not allowing client-server partition. JWTs are fine when partitions are more important than consistency and a pragmatic choice to avoid centralized state on a backing service.
[ Parent
| on HN ]
There are no comments on this comment yet.