News for hackers. Stuff that matters.

A comment on Why to not use JWT (2021). Parent comment

Re:Why to not use JWT (2021) by ffo on Thursday September 29, 2022 @11:09AM (#33021778)
One could include the SID claim, with this the token at least could be tested against a users session on the IdP/OP. (This is being used in the ID_Token in OIDC)
[ Parent | on HN ]

There are no comments on this comment yet.