You must log in or register to comment.
Absolute bangers! Must read for every dev and demistifies the stigma about rolling your own auth! Authz is where things get hard
deleted by creator
question: if I only have single server, wont having session cookie would be fine? why do we even use JWT?
The post already addressed that. JWT do have their place and that’s mainly for server to server handoff with short lived lifespan. After which, the recommendation is using Device Bound Session Cookie
