Part 2: Complete User Authentication: Sessions vs JWT | by Nick Jagodzinski | Medium

Sessions and JWT come to a head with a deeper analysis of their true components: Storage and Validation Strategy.

Part 2: Complete User Authentication: Sessions vs JWT Sessions and JWT come to a head with a deeper analysis of their true components: Storage and Validation Strategy. Nick Jagodzinski 15 min read · Nov 2, 2018 -- Listen Share If you missed out on Part 1 of Complete User Authentication , please skim through it first to review some basics that we build on in Part 2. Photo by Koushik Chowdavarapu on Unsplash Sessions vs JWT As popular a comparison as it is, S essions vs JWT is inaccurate. What is usually in comparison are two different, more specific concerns: Storage and Validation Strategy. Co

saved by

• Hritesh Sonawane

related reading

• JWT should not be your default for sessionsevertpot.com
• What are JWT, JWS, JWE, JWK, and JWA?loginradius.com
• passwords - Demystifying Web Authentication (Stateless Session Cookies) - Information Security Stack Exchangesecurity.stackexchange.com
• Why We Don’t Trust the Database With Authentication – Sturdy Statisticsblog.sturdystatistics.com
• webauth:sec10.pdfpdos.csail.mit.edu
• Show HN: RemoteStorage – sync localStorage across devices and browsersnews.ycombinator.com
• What is Private Key JWT: Deep dive into asymmetric client authentication — WorkOSworkos.com
• Cross-Site Request Forgery (CSRF) | Computer Securitytextbook.cs161.org
• Understanding The Web Security Model, Part III: Basic Principles and the Origin Concepteducatedguesswork.org
• Keyhive: Local-first access controlinkandswitch.com
• Understanding The Web Security Model, Part IV: Cross-Origin Resource Sharing (CORS)educatedguesswork.org
• Using HTTP cookies - HTTP | MDNdeveloper.mozilla.org