News for hackers. Stuff that matters.

A comment on Why to not use JWT (2021). Parent comment

Re:Why to not use JWT (2021) by cas8 on Thursday September 29, 2022 @01:21PM (#33024040)
It’s pretty simple to check a JWT’s issued time again a timestamp representing the last time an account changed password / revoked all sessions.
[ Parent | on HN ]

There are no comments on this comment yet.