Hacker News new | ask | show | jobs
by quickthrower2 980 days ago
But then I need a cookie banner /s
2 comments

You do NOT need a cookie banner to store a session ID or a JWT.
because these are not cookies, right?
No, because they are functional cookies, you don't need to ask for permission of those. I'm also deriving that you might be conflating the two things. JWT and cookies are two different things, but you can store JWTs in a cookie.
The law has never been about cookies themself but about tracking user and asking their consent for selling/sharing their identifying data for things unrelated to the displayed purpose of the site.
It is, in the minds of many.

And FYI it is not even a law.

You need it for local storage too if I’m not mistaken.
You don't need consent for strictly required cookies for functional purposes. Assuming the user actually logged in on your website, you don't need a banner.