News for hackers. Stuff that matters.

A comment on Stop using JSON Web Tokens for user sessions. Parent comment

Re:Stop using JSON Web Tokens for user sessions by kaoD on Saturday November 25, 2023 @06:56AM (#38412959)
So if I get this correctly, this is mostly useful for microservices and would be kinda pointless for a monolithic architecture?
[ Parent | on HN ]
Re:Stop using JSON Web Tokens for user sessions by growse on Saturday November 25, 2023 @07:04AM (#38413001)
Not even necessarily microservers. If you want a common authentication system used by lots of disparate services, token based Auth is a reasonable approach.

If you've just got one service endpoint, it doesn't buy you very much. Just mint a session token and be done with it.

[ Parent | on HN ]