SemanticScuttle - klotz.me

klotz: jwt* + authentication* + authorization* + oauth* + role-based access control*

0 bookmark(s) - Sort by: Date ↓ / Title / - Bookmarks from other users for this tag

1. JWTs Aren’t Made for Authorization

   This blog post explains why JWTs (JSON Web Tokens) are not suitable for authorization despite their popularity in authentication scenarios. It discusses the proper use of JWTs for verification, the risks of misusing them for authorization, and alternative solutions.

   2024-06-06 Tags: jwt, authorization, authentication, oauth, role-based access control, attribute-based access control, relationship-based access control by klotz

Top of the page

First / Previous / Next / Last / Page 1 of 0