undefined | Better HN

0 pointsthrow_m2393394y ago0 comments

> As soon as you involve auth, things get boring and annoying.

No, JWT is easy enough to implement.

0 comments

4 comments · 1 top-level

Spivak4y ago· 3 in thread

JWT is crazy annoying compared to "pass an API key" in the header.

throw_m239339OP4y ago

> JWT is crazy annoying compared to "pass an API key" in the header.

An API key and a JSON WEB TOKEN have a completely different purpose. API keys don't solve authorization.

A single JWT provider can authorize many different servers.

Furthermore Go already have several good JWT libraries.

Spivak4y ago

And JWT's don't solve authentication which was the actual problem people were looking to solve. For a prototyping server authn==authz is more than fine.

1 more reply

aabbcc12414y ago

For demo application, there maybe only one user

j / k navigate · click thread line to collapse