Hacker News new | ask | show | jobs
by scandox 3075 days ago
PAST looks good.

https://github.com/paragonie/past

Basically JWT but without the pitfalls as far as I can see.
2 comments
j_s 3075 days ago
Definitely depends on timeline; PAST is a reasonable recommendation gaining momentum as best practice. The recent Show HN annoucement discussed many caveats of authentication tokens:

Show HN: PAST, a secure alternative to JWT | https://news.ycombinator.com/item?id=16070394 (2018Jan:361 points,137 comments)

link
Spone 3075 days ago
Downside is that this is very new and there is only a PHP library.
link