i like building dumb stuff
I'm available for anything on Node.js backends and React.
Hey, thanks for reading! These are some great points you have mentioned here! It is true that when you store JWTs in cookies, it is as secure as a session ID in a cookie because cookies are essentially HTTP headers. There is a substantial difference in security only when you store JWTs in other locations such as localStorage. But implementing safe JWT auth in a way that could be as secure as using sessions would involve maintaining a blocklist on the server, which then makes using sessions easier IMO =) Thanks again for this comment, I will make the required edits in the post!