News for hackers. Stuff that matters.

A comment on Why to not use JWT (2021). Parent comment

Re:Why to not use JWT (2021) by misnome on Thursday September 29, 2022 @10:18AM (#33020973)
How is issuing a JWT implicitly mean that they are storing it in a database? Couldn't they have just... not stored the data... but can still validate it?
[ Parent | on HN ]
Re:Why to not use JWT (2021) by infamousjoeg on Thursday September 29, 2022 @10:29AM (#33021172)
Exactly this. They just need to validate the JWT signature against a JSON Web Key Set (JWKS). There's no need to store the data.
[ Parent | on HN ]