News for hackers. Stuff that matters.

A comment on Stop using JSON Web Tokens for user sessions. Parent comment

Re:Stop using JSON Web Tokens for user sessions by bob1029 on Saturday November 25, 2023 @02:14PM (#38415771)
In our case this is fine. The URL doesn't pass any claims. It is opaque client state bound to a specific identity which is validated by other means.
[ Parent | on HN ]

There are no comments on this comment yet.