Hacker News new | ask | show | jobs
by stickfigure 751 days ago
Alternatively, just don't worry about token revocation and all that complicated stuff? So you have a window of 5 minutes (or whatever your access token expiry is) that you can't revoke - is that a big deal?

A simple JWT implementation isn't that complicated, but you have to accept some limitations.

1 comments

If it only adds disadvantages, better not to use it though.