jwtfail
Re:Show HN: PAST, a secure alternative to JWT
on Thursday January 04, 2018 @01:48PM (#16072910)
Congratulations, you’ve just invented session tokens. Don’t get me wrong: stateless tokens (like JWT) are terrible in part because they’re irrevocable, but then why bother reimplementing session tokens with JWT? Just use plain old session tokens instead.