Hacker News new | ask | show | jobs
by gum_wobble 26 days ago
This is badly written? I was gonna try to argument but it just sound like the writer had a bad day configuring a project IAM and put a generic rant online about JWT usage...

If your frontend application connects to multiple protected APIs, you just can't use a session. That's it. Mobile apps and some specific web application need this a lot.

The only true claim I see in this post is > almost every developer shipping it has no idea why.

That's the true problem. JWT is being used as a SSO strategy in the wrong way most of the times.

1 comments

You dont need jwt so that you can authenticate API or Mobile app. people were doing exactly that long before JWT was invented.