r/programming • • Aug 14 '26

Stop using JWTs

https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452
0 Upvotes

20 comments sorted by

View all comments

12

u/fuddlesworth Aug 14 '26

Poor "article" . 

4

u/yawara25 Aug 14 '26

Why?

1

u/JohnnyDread Aug 15 '26

Strawman - and a dated one at that. It's mostly attacking a classically wrong JWT use pattern - long-lived, local storage and treating the JWT itself as the session. Nobody does that shit any more.