News for hackers. Stuff that matters.

A comment on Learnings from 5 years of tech startup code audits. Parent comment

Re:Learnings from 5 years of tech startup code audits by nijave on Friday May 27, 2022 @12:03AM (#31525913)
Can't you revoke them the same way you revoke any other auth token and put the token ID in a database somewhere?
[ Parent | on HN ]
Re:Learnings from 5 years of tech startup code audits by waplot on Friday May 27, 2022 @12:30AM (#31526018)
it won't be stateless then, and you might as well just use traditional sessions then
[ Parent | on HN ]