News for hackers. Stuff that matters.
Re:Anatomy of a JWT by daveidol on Wednesday March 02, 2022 @08:36PM (#30536007)
I still don't see how this makes it significantly more difficult to manage or revoke a JWT than a server-side session. For the session you remove it from the DB, and with a JWT you add it to a blacklist.

About the same amount of effort from my perspective, and revokes are probably extremely rare by comparison to issues or validations of tokens/sessions...

There are no comments on this comment yet.