Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

the only unique advantage of JWT-type auth is reducing load on auth backends

everything else you mention is equally available in other, simpler, auth schemes



Yes, I didn't disagree with that. All I'm saying if you're already using JWTs, you're not locked out completely from implementing these features. It just comes with a drawback that might be worth it, depending on your customerbase and team size.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: