Why do many people not recommend using JWT?

My article is open to everyone; non-member readers can click this link to read the full text. Lorem ipsum dolor sit amet

If you often look at online tutorials for building projects, you’ll notice that many of them use JWT.

But is it really safe?

Why do so many people advise against using it? This article will provide you with a comprehensive understanding of JWT and its pros and cons.

What is JWT?

Here is the official website: JSON Web Tokens — jwt.io

This is what JWT is.

If you’re not familiar with JWT, don’t worry! They’re not that complicated!

You can think of JWT as a piece of JSON data that you can verify to confirm that the data comes from someone you trust.

Of course, we won’t go into how it’s implemented here, but if you’re interested, you can look into it yourself.

Now, let’s talk about its process:

1. When you log in to a website, the website generates a JWT and sends it to you.
2. The JWT acts like a package that contains some identity information about you, such as your username, roles, permissions, etc.
3. Then, you carry this JWT with you every time you communicate with the website.
4. Whenever you access a page that requires authentication, you present this JWT to the website.
5. When the website receives the JWT, it verifies its signature to ensure that it was issued by the website and checks the information within it to confirm your identity and permissions.
6. If everything checks out, you’re allowed to continue accessing the protected page.

Why is JWT considered bad?

First, when we use JWT, it’s typically for tasks like:

• User registration on a website
• User login on a website
• User clicks and performs actions
• The website uses the user’s information to create, update, or delete data

These tasks often involve database operations such as:

• Recording the actions a user is performing
• Adding some user data to the database
• Checking the user’s permissions to see if they can perform certain actions

Now, let’s go over some of its drawbacks step by step

JSON

1. Lorem ipsum dolor sit amet, consectetur adipiscing elit. 2. Praesent pellentesque sapien eu diam maximus elementum. 1. Nullam imperdiet tellus vitae sapien tempor, a malesuada diam accumsan. 2. Etiam nec ligula auctor, iaculis mi vel, semper quam. 1. Quisque lobortis lectus sit amet nulla elementum ullamcorper ut et ligula. 2. Sed non augue vitae erat convallis maximus. 1. Ut at leo vel velit porta interdum. 2. Nullam in lorem venenatis, ultrices sapien id, condimentum ligula. 1. Quisque vel sapien eu elit convallis pellentesque eu vitae arcu. 2. Proin et elit suscipit, vestibulum nulla at, rhoncus tellus. 1. Phasellus pharetra odio quis elit egestas accumsan. 2. Donec id quam quis tortor suscipit gravida. 1. Vestibulum nec diam et augue accumsan cursus. 2. Integer porttitor elit vitae nunc scelerisque pulvinar. 1. Vivamus quis turpis consequat, sagittis risus ac, accumsan odio. 2. Donec vehicula augue semper, commodo nisl vitae, commodo arcu. 3. Integer euismod felis a purus dapibus iaculis. 4. Integer ut mi et magna finibus imperdiet et in sem. 3. Nam commodo nisl auctor luctus elementum. 4. Maecenas et elit a tellus vulputate gravida nec aliquet magna. 3. Quisque ut urna sit amet mauris blandit gravida blandit sit amet tortor. 4. Duis gravida quam eu enim lobortis, eu fringilla lectus molestie. 3. Nulla volutpat erat at urna sollicitudin, quis efficitur lorem blandit. 4. Aliquam at erat at nulla accumsan gravida. 3. Pellentesque sed est efficitur, ultricies elit in, finibus justo.

• Lorem ipsum dolor sit amet, consectetur adipiscing elit.
• Praesent pellentesque sapien eu diam maximus elementum.
  • Nullam imperdiet tellus vitae sapien tempor, a malesuada diam accumsan.
  • Etiam nec ligula auctor, iaculis mi vel, semper quam.
    • Quisque lobortis lectus sit amet nulla elementum ullamcorper ut et ligula.
    • Sed non augue vitae erat convallis maximus.
      • Ut at leo vel velit porta interdum.
      • Nullam in lorem venenatis, ultrices sapien id, condimentum ligula.
        • Quisque vel sapien eu elit convallis pellentesque eu vitae arcu.
        • Proin et elit suscipit, vestibulum nulla at, rhoncus tellus.
          • Phasellus pharetra odio quis elit egestas accumsan.
          • Donec id quam quis tortor suscipit gravida.
            • Vestibulum nec diam et augue accumsan cursus.
            • Integer porttitor elit vitae nunc scelerisque pulvinar.
              • Vivamus quis turpis consequat, sagittis risus ac, accumsan odio.
              • Donec vehicula augue semper, commodo nisl vitae, commodo arcu.
            • Integer euismod felis a purus dapibus iaculis.
            • Integer ut mi et magna finibus imperdiet et in sem.
          • Nam commodo nisl auctor luctus elementum.
          • Maecenas et elit a tellus vulputate gravida nec aliquet magna.
        • Quisque ut urna sit amet mauris blandit gravida blandit sit amet tortor.
        • Duis gravida quam eu enim lobortis, eu fringilla lectus molestie.
      • Nulla volutpat erat at urna sollicitudin, quis efficitur lorem blandit.
      • Aliquam at erat at nulla accumsan gravida.
    • Pellentesque sed est efficitur, ultricies elit in, finibus justo.