DEV Community

Discussion on: How JWTs Could Be Dangerous and Its Alternatives

Collapse
 
wadecodez profile image
Wade Zimmerman

IMO JWT is only good for signed requests, ie not authentication or authorization, but just checking that the data was not tampered with.

Collapse
 
nigel447 profile image
nigel447

like how we often create a signed(checksum) url where the jwt is superior to the signed url in that we have the ability to encrypt the attributes and also standardize the encoding

Some comments have been hidden by the post's author - find out more