Yes but generally magic links are only used for authentication. So if you delete... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ithkuil 9 months ago \| parent \| context \| favorite \| on: Ten years of JSON Web Token and preparing for the ... Yes but generally magic links are only used for authentication. So if you delete or downgrade the principal whoever uses that magic link to authenticate can only perform the operations that are associated to the principal and the check is performed after the magic link is verified, unless the magic link also used to carry auth claims

paulddraper 9 months ago [–]

Yes, up-to-date permissions require centralized consistency.

My point is…JWT can be used in a number of contexts.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact