Post

We spoke at @amsterdam.voxxeddays.com about a topic that may be controversial: "Don't use JWTs for authorization" What do you think? youtu.be/ucTOgQTk6wk?...

It ain't that "controversial": JWT are good for authentication (a12n), but the a11n info they carry is not controlled by you. Whether you use that info for your a11n must be a deliberate, and consciuous choice; otherwise you're just lazy because you don't want to code the a11n layer yourself