|
|
|
|
|
|
by blixt
46 days ago
|
|
|
JWTs are fine, seems a bit sensationalist title... Some nice topics to talk about instead: - When to use an encrypted value (and symmetric or asymmetric), vs. a random (but secret) value, vs. a signed value (readable but not tamperable) - Where to put these values (memory, localStorage, cookies) - How to make sure these values don't last forever, and whether you need to be able to revoke them (make them invalid before their natural expiration timestamp) |
|
|