News for hackers. Stuff that matters.
Re:Claude's API now supports CORS requests, enabling client-... by spyspy on Friday August 23, 2024 @01:14PM (#41330856)
Devs here often don’t even really understand JWT tokens as evidenced by the hundreds-of-comments deep arguments I’ve witnessed over them.
Re:Claude's API now supports CORS requests, enabling client-... by apitman on Friday August 23, 2024 @01:22PM (#41330932)
JWTs are orthogonal to OAuth2. Tokens in OAuth2 are opaque to the client applications. JWTs are one way to do it, though with significant tradeoffs.