Hacker News new | ask | show | jobs
by green_wheel 45 days ago
> The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions need to have longer lifespans than that.

Citation needed. Where does it say this?