Get the latest tech news
Should I use JWTs for authentication tokens?
No.Not satisfied? Fine, fine. I'll write a longer answer.Let's talk about what we're talking about. JWT stands for JSON Web Tokens, a reasonably well defined standard for authenticated to
The JWT spec ( RFC 7519) makes suggestions by providing a few well-known registered claim names: issuer, audience, subject, expiration time, etc. The core benefit, proponents will tell you, is that the recipient of a JWT doesn’t need to connect to the user database to verify the token authenticity and render its service. All other services can act on the information stored in the JWT alone, and don’t need to go through the user database, which would represent a choke point.
Or read this on Hacker News