JWT is a particularly useful technology for API authentication and server-to-server authorization. JWT (JSON Web tokens) is a great way to implement authentication in your applications, often it is being treated as a silver bullet for almost every ba...

Markdown supported · ⌘↵ to post
José Pablo Ramírez Vargas
Senior Software Developer @ Intel
Tokens should never be stored anywhere. If your db is hacked, you are giving away all those accesses. A refresh token should also have an expiration time, only far longer than an access token.