Hacker News new | past | comments | ask | show | jobs | submit login

And what does that give you over just using a cookie?



Sometimes you don't have cookies? Like with mobile apps. With JWT you can also have uniform auth across mobile and web apps, and when done right is a beautiful thing™.

Also cross domain/app data signing.


> Sometimes you don't have cookies? Like with mobile apps.

A cookie is just an HTTP header. Any mobile app that can speak HTTP can use cookies.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: