If a user “logs out” and the JWT isn’t invalidated they ... • Aaron Parecki

48°F

Evan Oslick https://twitter.com/eoslick

If a user “logs out” and the JWT isn’t invalidated they can still perform actions. Most distributed apps don’t notify all micro services a JWT is no longer valid and the micro service just goes “okay”. And for performance, the micro service doesn’t verify validity.

Portland, Oregon • 79°F

Thu, Sep 23, 2021 7:38pm +00:00 (liked on Sat, Sep 25, 2021 1:37pm -07:00)

Have you written a response to this? Let me know the URL:

Posted in /likes using indieweb.org/Shortcuts