News for hackers. Stuff that matters.

A comment on Stop using JSON Web Tokens for user sessions. Parent comment

Re:Stop using JSON Web Tokens for user sessions by uticus on Saturday November 25, 2023 @08:35AM (#38413395)
> The point of JWT vs opaque tokens is that you can just inspect the token itself to derive permissions without hitting any sessions in DB, right?

No. Focus on “token” instead of “JWT.” JWT is just a standard.

[ Parent | on HN ]
Re:Stop using JSON Web Tokens for user sessions by paulryanrogers on Saturday November 25, 2023 @09:50AM (#38413867)
Are you saying tokens can't be opaque?
[ Parent | on HN ]