Re:Why to not use JWT (2021)
by wdb on Thursday September 29, 2022 @10:26AM
(#33021099)
Why not let the API Gateway check it?
[ Parent
| on HN ]
Re:Why to not use JWT (2021)
by eagsalazar2 on Thursday September 29, 2022 @10:47AM
(#33021445)
"Yes but then ... why use jwt at all, you could just save a classic session (with random token) in that cache as well".
JWTs add complexity and have zero benefit. The author never said it can't be made to work, obviously it can. It's just completely pointless in most applications.