Sherifdeen.
Back to Blog

Series

Auth Is More Than Login

A practical series on XSS, CSRF, JWTs, sessions, refresh tokens, and the auth rules people skip.

1 published post of 5 planned parts

  1. JWT surrounded by the security controls required to build a complete authentication systemPart 1Your Auth Is Not Safer Because You Used JWTsJWTs can prove that claims were signed. They cannot decide where credentials live, how logout works, or what a user may do. A token format is not an auth system.· 6 min read