JWT promises stateless authentication and delivers neither. It's a cargo cult that makes your app slower, less secure, and harder to maintain — and almost every developer shipping it has no idea why.
  • devaly@ani.socialEnglish
    3·
    37 minutes ago

    Dumb post written by dumb people.

    Cannot even understand the tradeoffs between public verified auth tokens and opaque tokens.

    Thinks Redis works for all usecases and scales, free of cost.