Wednesday 25 July 2018

What's the fort knox of authentication in Node.js?

Unanimously it seems people are use JSON web tokens, but I'm quite hesitant to use refresh tokens because they are prone to cross scripting attacks. Seems like it isn't meant on something like a finance application. Thoughts?

Submitted July 25, 2018 at 06:18PM by Nephelophyte

No comments:

Post a Comment