~/talk

Stop Using JSON Web Tokens (JWTs) for Authorization!

watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/stop-using-json-web-tokens-jwts-for-authorization
Talkat JSNation 2026 · on Monday, 2026-06-15· at 19:45· [security]

speaker

name:Sohan Maheshwar
website:https://sohan.co

resources

video:https://portal.gitnation.org/contents/stop-using-json-web-tokens-jwts-for-authorization
slides:https://cdn.cloudinary.com/stichting-frontend-amsterdam/image/upload/v1781546499/slides/Utd5hNlcdIjKA1IUFpI2jBouHML81U2sc2xtd6pt1G8%403D.pdf

summary

Explains why JWTs are a poor choice for authorization in distributed systems, citing issues like revocation difficulty, ambiguous scope claims, and the "New Enemy Problem" from Google’s Zanzibar paper. Focuses on technical and security limitations of using JSON Web Tokens for AuthZ across frontends, backends, and microservices rather than using them for authentication.

AI-written summary · about

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.