Re:Launch HN: Better Auth (YC X25) – Authentication Framewor...
by motorest on Monday May 19, 2025 @04:30PM
(#44034489)
> We don’t use JWTs directly
Why?
Re:Launch HN: Better Auth (YC X25) – Authentication Framewor...
by hungryhobbit on Tuesday May 20, 2025 @11:10AM
(#44042509)
Evidently they prefer to be less secure by default.
Re:Launch HN: Better Auth (YC X25) – Authentication Framewor...
by portaouflop on Tuesday May 20, 2025 @11:40AM
(#44042856)
JWTs aren’t less or more secure by default see the comments posted above
Re:Launch HN: Better Auth (YC X25) – Authentication Framewor...
by theogravity on Tuesday May 20, 2025 @12:52AM
(#44037921)
As another asked, "why?" on no JWT? It makes interfacing with our API servers so much easier as we don't need to maintain infra for sessions and wouldn't be limited by the 4kb limit for sending cookies.
Re:Launch HN: Better Auth (YC X25) – Authentication Framewor...
by doshaa on Tuesday May 20, 2025 @04:26AM
(#44039148)
I use better auth for a real app
There is a plugin provided by better auth for jwt https://www.better-auth.com/docs/plugins/jwt
We dont need it since everything is a single "server" and cookies are good enough. JWT would be added complexity ( e.g sign out ) that i find it better to not be set as a default.
bonus reading http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-fo...
- We don’t use JWTs directly, and sessions always require state (it’s not stateless). And yeah, both the client and server handles automatic session refresh.
- Yes, we support both multiple sessions or having different organizations open in different tab: https://www.better-auth.com/docs/plugins/multi-session
- Yes, that’s possible, you just need to set the `prompt` parameter to `select_account`