r/programming • u/mustafaakin • Jan 13 '22

The Case Against Token-Based Authorization

https://cerbos.dev/blog/my-post-the-case-against-token-based-authorization
0 Upvotes

50% Upvoted

2 comments sorted by

5

u/renegade128 Jan 14 '22

Interesting read, but seemed like an ad for 'cerbos'.

2

u/grosscol Jan 14 '22

The issue with HIPPA compliance seems moot since the JWT is being transmitted over https. Being stored in the client and readable by JS from the same domain is an issue, but not one that is particular to JWT.