Hacker News

Article URL: https://pacman.holenet.info/

Comments URL: https://news.ycombinator.com/item?id=43503263

Points: 1

# Comments: 0

Article URL: https://www.barrons.com/news/firms-and-researchers-at-odds-over-superhuman-ai-505af718

Comments URL: https://news.ycombinator.com/item?id=43503211

Points: 1

# Comments: 0

Article URL: https://github.com/IshaanAdarsh/Postgres-extension-tutorial/blob/main/SGML/intro_and_toc.md

Comments URL: https://news.ycombinator.com/item?id=43503207

Points: 2

# Comments: 0

Article URL: https://getlago.substack.com/p/ai-isnt-the-saas-businessits-resale

Comments URL: https://news.ycombinator.com/item?id=43503201

Points: 2

# Comments: 0

Article URL: https://electrek.co/2025/03/27/v2x-growth-electric-school-buses/

Comments URL: https://news.ycombinator.com/item?id=43503185

Points: 2

# Comments: 0

Article URL: https://lucumr.pocoo.org/2025/2/20/ugly-code/

Comments URL: https://news.ycombinator.com/item?id=43503107

Points: 1

# Comments: 0

Article URL: https://www.ft.com/content/bc59392e-ac59-47cf-9685-dbb79da55c6b

Comments URL: https://news.ycombinator.com/item?id=43503102

Points: 1

# Comments: 0

Article URL: https://alexwlchan.net/2025/building-to-last/

Comments URL: https://news.ycombinator.com/item?id=43503100

Points: 1

# Comments: 0

Article URL: https://www.syntasso.io/post/kratix-for-database-management-a-step-by-step-guide-to-amazon-rds-deployment

Comments URL: https://news.ycombinator.com/item?id=43503098

Points: 1

# Comments: 0

I am building an application and I do not indent to use token by reference, so using JWTs. But there is a requirement that admins need to be able to revoke user sessions, which would require storing revoked unexpired JWTs, their ids or some hash on the DB and add an extra lookup. Doing this for a user means revoking all JWTs they might have generated if they are using multiple devices, and we don't know which tokens to revoke.

My solution is to add 2 claims (id and sid) and sign sid with a user secret before signing the token with the app secret.

When a token comes in, I first validate it with the app secret. If not valid or expired, we return a 401.

If valid, I validate the sid with the user secret since I now know who it belongs to.

The extra lookup for the user's secret then adds minimal overhead because we've already pre authenticated and can be considered business logic.

Thus, revoking all user sessions requires simply changing the user's secret.

What do you guys think about this? Any holes?

Comments URL: https://news.ycombinator.com/item?id=43503095

Points: 1

# Comments: 0

Article URL: https://www.cartoonshateher.com/p/why-im-obsessed-with-lonely-young

Comments URL: https://news.ycombinator.com/item?id=43503079

Points: 1

# Comments: 0

Article URL: https://www.bbc.co.uk/news/articles/cx2gey6pvddo

Comments URL: https://news.ycombinator.com/item?id=43503074

Points: 2

# Comments: 0

Article URL: https://dizzy.zone/2025/03/27/BLAKE2b-performance-on-Apple-Silicon/

Comments URL: https://news.ycombinator.com/item?id=43503026

Points: 1

# Comments: 0

Article URL: https://onlinelibrary.wiley.com/doi/full/10.1111/pops.13085

Comments URL: https://news.ycombinator.com/item?id=43503023

Points: 1

# Comments: 0

Article URL: https://github.com/bytedance/MegaTTS3

Comments URL: https://news.ycombinator.com/item?id=43503008

Points: 2

# Comments: 0

Article URL: https://timothysnyder.org/on-tyranny

Comments URL: https://news.ycombinator.com/item?id=43503004

Points: 1

# Comments: 0

Article URL: https://jknt.in/posts/strategic-implications-mcp/

Comments URL: https://news.ycombinator.com/item?id=43502994

Points: 1

# Comments: 0

Article URL: https://www.nber.org/system/files/working_papers/w25769/w25769.pdf

Comments URL: https://news.ycombinator.com/item?id=43502989

Points: 1

# Comments: 0

Article URL: https://www.youtube.com/watch?v=LAjgtPENG4A

Comments URL: https://news.ycombinator.com/item?id=43502983

Points: 2

# Comments: 0

Article URL: https://about.fb.com/news/2025/03/bringing-magic-of-friends-back-to-facebook/

Comments URL: https://news.ycombinator.com/item?id=43502978

Points: 2

# Comments: 1