DEV Community

Discussion on: Be careful of the JWT hype train

Collapse
 
mykelswitzer profile image
Michael Switzer

Unless scaling your system has driven you to microservices as a point of last resort, they're usually the wrong answer. Over the next couple of years, people are going to figure that out the hard way.

I can't disagree with this sentiment more strongly. While I've seen many a distributed system setup incorrectly, I've never seen one worse than a monolithic architecture.

the HTTP server connects to other microservices with the user information as part of its request. There's no reason to pass the JWT around.

That's a hard shell, soft center security approach which is very vulnerable to attack.