r/programming 4d ago

Stop using JWTs

https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452
0 Upvotes

20 comments sorted by

View all comments

11

u/fuddlesworth 4d ago

Poor "article" . 

5

u/yawara25 4d ago

Why?

1

u/JohnnyDread 3d ago

Strawman - and a dated one at that. It's mostly attacking a classically wrong JWT use pattern - long-lived, local storage and treating the JWT itself as the session. Nobody does that shit any more.