search

nwartell / framework

Quick-deploy PHP framework with separate application and API components
MIT License
1 stars 0 forks source link

Investigate JWT usage, devise more-secure session authentication method #8

Closed nwartell closed 5 months ago

nwartell commented 5 months ago

I'm using JWT wrong by storing the token in a session variable. This needs to be examined.

There are articles that warn against using JWT for session authentication and validation. Article 1 Article 2 Article 2 cont.

Might be best to just use sessions?