• Scrubbles@poptalk.scrubbles.tech
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    13 days ago

    Thanks for your insights in gdpr. Jwts though I know can be invalidated, but it’s a few extra steps, and I’m not surprised when companies don’t go the extra mile. It’s usually such a niche case where someone logs in, has a jwt, and the server needs to invalidate it, but it happens.