DEV Community

# jwt

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Digital identity backend architecture: the decisions tutorials skip

Digital identity backend architecture: the decisions tutorials skip

Comments
8 min read
Your JWT decoder might be leaking your tokens. Here's how to check.

Your JWT decoder might be leaking your tokens. Here's how to check.

Comments
3 min read
Django Session Cookie vs localStorage JWT Security Comparison

Django Session Cookie vs localStorage JWT Security Comparison

2
Comments
11 min read
The Operational Cost of JWT Lifecycle Management: Overlooked Details

The Operational Cost of JWT Lifecycle Management: Overlooked Details

Comments
11 min read
Custom Database-Backed Token Auth vs. JWT: Why We Rolled Our Own Authentication in Django Rest Framework (DRF)

Custom Database-Backed Token Auth vs. JWT: Why We Rolled Our Own Authentication in Django Rest Framework (DRF)

1
Comments
4 min read
JWT Token Refresh Patterns in React 19: Avoiding the Silent Auth Death Spiral

JWT Token Refresh Patterns in React 19: Avoiding the Silent Auth Death Spiral

Comments
4 min read
JWT Hardening Checklist: Beyond 'Use HS256'

JWT Hardening Checklist: Beyond 'Use HS256'

Comments
6 min read
JWT in Node.js: How It Works, 5 Errors That Compromise Your API, and Refresh Token with Rotation

JWT in Node.js: How It Works, 5 Errors That Compromise Your API, and Refresh Token with Rotation

1
Comments
7 min read
"One JWT, five services, and the python-jose audience list trap"

"One JWT, five services, and the python-jose audience list trap"

Comments
6 min read
JWT Storage: LocalStorage or HttpOnly Cookie?

JWT Storage: LocalStorage or HttpOnly Cookie?

1
Comments
9 min read
Authentication vs. Authorization: A Deep Dive Every Backend Engineer Must Know

Authentication vs. Authorization: A Deep Dive Every Backend Engineer Must Know

1
Comments
5 min read
Stop Storing JWTs in localStorage: A Security Guide for Web Developers

Stop Storing JWTs in localStorage: A Security Guide for Web Developers

1
Comments
3 min read
We rotated our JWKS without overlap. Here is the 4-minute window that broke prod.

We rotated our JWKS without overlap. Here is the 4-minute window that broke prod.

3
Comments
5 min read
Part 3 — Inside the Auth Service: From Token Validator to Policy Decision Point

Part 3 — Inside the Auth Service: From Token Validator to Policy Decision Point

Comments
6 min read
Part 7 — Token Revocation Without Killing Performance

Part 7 — Token Revocation Without Killing Performance

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.