News for hackers. Stuff that matters.

A comment on Ask HN: What do you use to build auth?. Parent comment

Re:Ask HN: What do you use to build auth? by likortera on Wednesday June 29, 2022 @01:39PM (#31923345)
Recommending people that don't know how to/if to do it (that's why they are asking) to write their own auth, trivializing the problem and in the same comment recommending using JWT terrifies me quite a lot.
[ Parent | on HN ]
Re:Ask HN: What do you use to build auth? by jaeming on Wednesday June 29, 2022 @06:02PM (#31926239)
There's nothing wrong with JWT as a token spec. I prefer stateful sessions as well but but a stateless token also serves specific use-cases. It has also become a standard practice for decouple front-ends that live on different domains, etc.
[ Parent | on HN ]