If you checking the session on the server, you might as well just use a token in... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

icebraining on Nov 1, 2018 | parent | context | favorite | on: Stop using JWT for sessions (2016)

If you checking the session on the server, you might as well just use a token in a cookie. The point of the JWT complexity is to avoid that.

nbevans on Nov 2, 2018 [–]

JWT tokens being passed via cookies is a valid use case.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact