2026-08-03 12:29 UTC
i dont get much of a reason to use #JWT s at least on projects meant to be self hosted, like api tokens that are stored in db achives everything without complex renewal and revocation logic and when you need to support old protocols or simpler clients you need to implement app password kind of system and come back to needing to store hashes of tokens anyway
Replies (1)
-
@Alper_Celik@infosec.exchange 2026-08-03 12:30
like i get how if you use JWTs everywhere you avoid hitting the db for authentication but how big of a deal exactly that