I choose cookies over JWT

English

Draft Disclaimer: Please note that this article is currently in draft form and may undergo revisions before final publication. The content, including information, opinions, and recommendations, is subject to change and may not represent the final version. We appreciate your understanding and patience as we work to refine and improve the quality of this article. Your feedback is valuable in shaping the final release.

I choose cookies over JWT

tags: beginners, webdev, tutorial, career

Some common misconception I read is that

JWT is more secure for webapp

or

I have to use JWT to authenticate my SPA

Summary

  • Cookies vs JWT

  • When to use JWT

  • Reminder that you can use still use cookies to authenticate your SPA

  • This means you don't always need JWT

Cookies vs JWT

JWT is not more secured

JWT token can be decrypted. So you should not store in it sensitive data. Cookie is more secure because you can set the domain and make it http only so that Javascript can't mess with it.

When to use JWT

Use JWT for shared or distributed architecture Example: How a single account is used to authenticate all apps (google product)

Babacar Cissé DIA
By on

A Solutions Architect and Developer who thrives on crafting digital solutions. Passionate about learning and innovation, he sees challenges as opportunities to build secure, responsive, high-quality applications that drive business growth through cutting-edge technology. His blog serves as a tech memoir, documenting his coding journey and sharing insights into software architecture. It’s a blend of lessons, musings, and tech expertise, providing a glimpse into the art of crafting solutions in an ever-evolving digital landscape.