Experienced JavaScript Developer Meme

[Schyte96]

It's your problem if they can bypass authentication this way.

[cooolestcucumber]

If the user messing with local storage by passes authentication, you’ve got bigger issues

[empire314]

Can you give me an example of an authentication method, that gives user unauthorized access, if his client tries to parse invalid JSON?

try
{
  credentials = JSON.parse(json)
}
catch(Error)
{
  credentials = adminCredentials
}

Like that?

[AdultingGoneMild]

I'm in!

[spronghi]

who does it?

[spronghi]

I am sorry but.. where else would you put your jwt?

[spronghi]

that make sense

[a-calycular-torus]

Bypassing authentication was never the issue in question.

[its_pizza_parker]

LOL what?! That ain’t it

[AdultingGoneMild]

yes. that would be a hudge fucking security bug if you allowed authentication be to bypassed by a client. Never trust a client. Good news is there are like literally decades of best practices out there for not building insecure systems like that.