Ranter
Join devRant
Do all the things like
				++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
				Sign Up
			Pipeless API
 
				From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
				Learn More
			Comments
		- 
				
				 perotti7757y@Artemix Don't want to be rude here. But do you you get it what the main point of restful apis using jwtokens is? perotti7757y@Artemix Don't want to be rude here. But do you you get it what the main point of restful apis using jwtokens is?
- 
				
				 D--M22187yThis was the standard years ago. D--M22187yThis was the standard years ago.
 
 Lots of developers don't know what JWT is.
 
 I share the sentiment, but you shouldn't be an asshole about it. Some people simply don't know. You should explain it to them.
- 
				
				I am by no means an expert here but I have read that both have their merits and demerits. For a simple service, sessions could also be a way to go
- 
				
				 perotti7757y@Artemix that's why you'd use validators. You can't blindly accept a token just because. perotti7757y@Artemix that's why you'd use validators. You can't blindly accept a token just because.
 Rest APIs shouldn't keep any kind of session
Related Rants
- 
						
							 rephiscorth37Everyone here ranting about a fucking missing semicolon. I can't remember the last time a missing semicolon wa... rephiscorth37Everyone here ranting about a fucking missing semicolon. I can't remember the last time a missing semicolon wa...
- 
						
							 CodesNotHot10-Laughed at Gitlab the other day -Accidentally dropped my db today. fuck karma CodesNotHot10-Laughed at Gitlab the other day -Accidentally dropped my db today. fuck karma
- 
						
							 codeclod15 codeclod15 When you have a super annoying problem that Google has been unable to help with... But you stumble upon a link... When you have a super annoying problem that Google has been unable to help with... But you stumble upon a link...




My dumbass colleague thinks the best idea to a Restful API backend is to store some kind of session based on the token.
It'd be great if that remained as an idea instead of this 11 month-old system he built before I got in.
MOTHERFUCKER.
Yes, it does mean that if the server boots for whatever reason, everyone has to login again to get a valid token LOL
rant
fuck
colleague
best malpractices
this
dumbass