News for hackers. Stuff that matters.

A comment on Ask HN: What do you use to build auth?. Parent comment

Re:Ask HN: What do you use to build auth? by candiddevmike on Wednesday June 29, 2022 @10:25AM (#31920578)
Devs should never default to using JWTs IMO, I think that is leading folks to delegate auth to providers as it overly complicates the process. There's nothing wrong with stateful API keys/session tokens, and I would wager the majority of web services still use them.
[ Parent | on HN ]
Re:Ask HN: What do you use to build auth? by waspight on Wednesday June 29, 2022 @12:14PM (#31922202)
Jwt is a much easier term to google for information than the api key/session solution you mention. I actually default to jwt just because I don’t have a clear picture of what the alternative is called.
[ Parent | on HN ]
Re:Ask HN: What do you use to build auth? by jaeming on Wednesday June 29, 2022 @05:57PM (#31926195)
I agree, stateful sessions can handle a number of problems and use-cases more gracefully. I work with a lot of api's the service multiple clients though and I do see a use-case for stateless as well.
[ Parent | on HN ]