News for hackers. Stuff that matters.

A comment on JWT should not be your default for sessions. Parent comment

Re:JWT should not be your default for sessions by giaour on Thursday May 13, 2021 @06:18PM (#27148197)
You can push a list of revoked tokens to each server (similar to how certificate revocation lists work with (m)TLS).
[ Parent | on HN ]

There are no comments on this comment yet.