Are you using JWTs for user sessions in the correct way?

Written by supertokens.io | Published 2020/05/13
Tech Story Tags: jwt | json-web-token | session-management | oauth2 | user-authentication | web-security | token-refresh | security

TLDR JWTs were originally designed for use in OAuth - which is fundamentally different to user sessions. SuperTokens are the most secure and easy to implement solution for user session management. I will attempt to make a comprehensive list of the pros and cons of using JWT for this context. I do not intend to solve this debate, since devs (especially devs) are often strongly opinionated. However, I do offer my opinion on the best solution for session management (spoiler: it has the advantages of JWT without any of its disadvantages!)via the TL;DR App
no story
Written by supertokens.io | The most secure and easy to implement solution for user session management
Published by HackerNoon on 2020/05/13
ABOUTHow hackers start their afternoons. We publish tech stories and build publishing software.

READEntirely free library read by hundreds of millions to learn anything about any technology.

WRITEHackerNoon elevates quality technology writing far and wide across the interwebs.

PARTNERHackerNoon works directly with tech companies to place ads by content relevancy