codeinabox@programming.dev to Web Development@programming.devEnglish · 2 months agoWhat's the best way to do authentication in modern applicationsneciudan.devexternal-linkmessage-square3linkfedilinkarrow-up19arrow-down12cross-posted to: hackernews@lemmy.bestiver.se
arrow-up17arrow-down1external-linkWhat's the best way to do authentication in modern applicationsneciudan.devcodeinabox@programming.dev to Web Development@programming.devEnglish · 2 months agomessage-square3linkfedilinkcross-posted to: hackernews@lemmy.bestiver.se
minus-squareghodawalaaman@programming.devlinkfedilinkarrow-up1·2 months agoquestion: if I only have single server, wont having session cookie would be fine? why do we even use JWT?
minus-squarebitfucker@programming.devlinkfedilinkarrow-up1·2 months agoThe post already addressed that. JWT do have their place and that’s mainly for server to server handoff with short lived lifespan. After which, the recommendation is using Device Bound Session Cookie
question: if I only have single server, wont having session cookie would be fine? why do we even use JWT?
The post already addressed that. JWT do have their place and that’s mainly for server to server handoff with short lived lifespan. After which, the recommendation is using Device Bound Session Cookie