DEV Community

Discussion on: JSON web tokens are NOT meant for authenticating the same user repeatedly: Use session tokens instead

Collapse
 
smarcet profile image
sebastian marcet

Well that is not totally correct oidc emits jwt ( id token) and you could revoke then from server side so basilly oidc is wrong from your pov ?