Forem

# jwt

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Operational Cost of JWT Lifecycle Management: Overlooked Details

The Operational Cost of JWT Lifecycle Management: Overlooked Details

Comments
11 min read
JWT is a scam and your app doesn't need it

JWT is a scam and your app doesn't need it

Comments
8 min read
JWT Refresh and Revocation Mechanisms: The State of Security Practices

JWT Refresh and Revocation Mechanisms: The State of Security Practices

Comments
10 min read
JWT Token Refresh Patterns in React 19: Avoiding the Silent Auth Death Spiral

JWT Token Refresh Patterns in React 19: Avoiding the Silent Auth Death Spiral

Comments
4 min read
JWT Hardening Checklist: Beyond 'Use HS256'

JWT Hardening Checklist: Beyond 'Use HS256'

Comments
6 min read
JWT in Node.js: How It Works, 5 Errors That Compromise Your API, and Refresh Token with Rotation
Cover image for JWT in Node.js: How It Works, 5 Errors That Compromise Your API, and Refresh Token with Rotation

JWT in Node.js: How It Works, 5 Errors That Compromise Your API, and Refresh Token with Rotation

1
Comments
7 min read
"One JWT, five services, and the python-jose audience list trap"

"One JWT, five services, and the python-jose audience list trap"

Comments
6 min read
JWT Storage: LocalStorage or HttpOnly Cookie?

JWT Storage: LocalStorage or HttpOnly Cookie?

1
Comments
9 min read
Authentication vs. Authorization: A Deep Dive Every Backend Engineer Must Know
Cover image for Authentication vs. Authorization: A Deep Dive Every Backend Engineer Must Know

Authentication vs. Authorization: A Deep Dive Every Backend Engineer Must Know

1
Comments
5 min read
Stop Storing JWTs in localStorage: A Security Guide for Web Developers
Cover image for Stop Storing JWTs in localStorage: A Security Guide for Web Developers

Stop Storing JWTs in localStorage: A Security Guide for Web Developers

1
Comments
3 min read
We rotated our JWKS without overlap. Here is the 4-minute window that broke prod.
Cover image for We rotated our JWKS without overlap. Here is the 4-minute window that broke prod.

We rotated our JWKS without overlap. Here is the 4-minute window that broke prod.

3
Comments
5 min read
Part 7 — Token Revocation Without Killing Performance

Part 7 — Token Revocation Without Killing Performance

Comments
6 min read
Part 3 — Inside the Auth Service: From Token Validator to Policy Decision Point

Part 3 — Inside the Auth Service: From Token Validator to Policy Decision Point

Comments
6 min read
How EdDSA JWTs Solve the Agent Credential Problem

How EdDSA JWTs Solve the Agent Credential Problem

Comments
4 min read
Validate JWTs from Multiple Issuers in kgateway
Cover image for Validate JWTs from Multiple Issuers in kgateway

Validate JWTs from Multiple Issuers in kgateway

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.