ariadev Comments - Answer Overflow

Not quite. Per se. When I do this, I usually have a token life of 5-10 seconds depending on how long I'm expecting that api to take to respond. Also when new token is generated/refreshed, the backend should note that there is a new token in play and only that can be validated. Meaning only the new saved token will be allowed. Rest tokens are by default won't match the token, therefore invalid

23 replies

TTCTheo's Typesafe Cult

•Created by 泣いオオカミー ≛ 🏆 ≛ on 2/3/2025 in #questions

Theo recent auth video on JWT

I haven't seen the video yet. Maybe its' so that even if an attack happens, we make sure to always use new tokens, so that old token will not work even if the attacker has that token? The method you mentioned is similar but instead of tokens, they are called sessions. user is logged in until session expires. One session can have many tokens, and that is to make it hard for attackers to gain control

23 replies

TTCTheo's Typesafe Cult

•Created by dARUS on 2/2/2025 in #questions

File Name

Line 17, 18. Use 'console.log(res)' to see if there is more data in res[0]. If there is more data here, modify your on change to take url and name both

9 replies

TTCTheo's Typesafe Cult

•Created by dARUS on 2/2/2025 in #questions

File Name

Show me the file upload code, how is the url being generated?

9 replies

TTCTheo's Typesafe Cult

•Created by dARUS on 2/2/2025 in #questions

File Name

Is the name coming from the name: url.split.pop?

9 replies

Gaming

Programming