Before using the cookie and session to do log in to register, now separated before and after the end, the browser does not support third-party cookies, so use the JWT, also don't want to use the session and then end, then the user information to save the token of the content?

CodePudding user response:

Is not recommended,

First, the user information written to the token and token information is confidential, once the token is generated, can produce security risks, although can be encrypted, but since the client is js, the hackers are visible
Also, is to evaluate your writing user information is what? Teach him to hackers will produce what are the risks