Hacker News new | ask | show | jobs
by mosdave 1477 days ago
if your frontend is interrogating the jwt you're doing it wrong
1 comments

Isn't it pretty common to read the expiration so you know when to refresh tokens?
It is, among other things like username or user e-mail address.

This is also, together with backend scalability, a major selling point for JWTs. Otherwise one might just as well use regular session ids in cookies.