News for hackers. Stuff that matters.
Re:Should I Use jwts For Authentication Tokens? by crabmusket on Monday May 27, 2024 @05:28PM (#40494918)
> But allow your users to create more than one, and make rotation and revocation easy

It's shocking how often this advice isn't followed. We often see it with non-tech companies who nonetheless deliver services over the internet.

There are no comments on this comment yet.