Re:Stop Using JWT for Sessions (2016)
by asoltysik on Sunday July 04, 2021 @04:37AM
(#27728152)
> Only morons use bare JWT
Why in the world would you write something like this?
[ Parent
| on HN ]
Re:Stop Using JWT for Sessions (2016)
by deviledeggs on Sunday July 04, 2021 @02:09PM
(#27731516)
That was a bit edgey, but I have seen far too many devs recreate OIDC using JWT. Writing their own token parsing and validation. Doing their own token expiration handling.
These days, just use OIDC. It takes care of everything for you. Most of the time, you just point your OIDC library at your auth server URL and it handles everything.