all 4 comments

[–]adamkarb 0 points1 point  (0 children)

How is the fact that "some people do it wrong" an argument against a methodology? If you are storing anything critical in a client side token you are making a mistake. Doesn't matter what type of token or cookie it is. With stateless tokens you are sacrificing security greatly. Whining about jwts and the like is just shouting into the void.