samanyu Sama-004

Stop using JWTs!

TLDR: JWTs should not be used for keeping your user logged in. They are not designed for this purpose, they are not secure, and there is a much better tool which is designed for it: regular cookie sessions.

If you've got a bit of time to watch a presentation on it, I highly recommend this talk: https://www.youtube.com/watch?v=pYeekwv3vC4 (Note that other topics are largely skimmed over, such as CSRF protection. You should learn about other topics from other sources. Also note that "valid" usecases for JWTs at the end of the video can also be easily handled by other, better, and more secure tools. Specifically, PASETO.)

A related topic: Don't use localStorage (or sessionStorage) for authentication credentials, including JWT tokens: https://www.rdegges.com/2018/please-stop-using-local-storage/

The reason to avoid JWTs comes down to a couple different points:

The JWT specification is specifically designed only for very short-live tokens (~5 minute or less). Sessions

Node.js Deployment

Steps to deploy a Node.js app to DigitalOcean using PM2, NGINX as a reverse proxy and an SSL from LetsEncrypt

1. Create Free AWS Account

Create free AWS Account at https://aws.amazon.com/

2. Create and Lauch an EC2 instance and SSH into machine

I would be creating a t2.medium ubuntu machine for this demo.

Install pnpm

see https://pnpm.io/installation

$ pnpm --version

corepack will NOT be distributed with Node.js v25>= https://nodejs.org/docs/latest-v24.x/api/corepack.html

Shall i implement it?
No ...

	#! /bin/bash
	#
	# Diffusion youtube avec ffmpeg

	# Configurer youtube avec une résolution 720p. La vidéo n'est pas scalée.

	VBR="2500k" # Bitrate de la vidéo en sortie
	FPS="30" # FPS de la vidéo en sortie
	QUAL="medium" # Preset de qualité FFMPEG
	YOUTUBE_URL="rtmp://a.rtmp.youtube.com/live2" # URL de base RTMP youtube

	# On slow systems, checking the cached .zcompdump file to see if it must be
	# regenerated adds a noticable delay to zsh startup. This little hack restricts
	# it to once a day. It should be pasted into your own completion file.
	#
	# The globbing is a little complicated here:
	# - '#q' is an explicit glob qualifier that makes globbing work within zsh's [[ ]] construct.
	# - 'N' makes the glob pattern evaluate to nothing when it doesn't match (rather than throw a globbing error)
	# - '.' matches "regular files"
	# - 'mh+24' matches files (or directories or whatever) that are older than 24 hours.
	autoload -Uz compinit

	/**
	* dwmconfig.h
	* Hardware multimedia keys
	*/
	/* Somewhere at the beginning of config.h include: */

	/*
	You obviously need the X11 development packages installed, X11proto in particular, but
	here is the location of the keysyms header upstream copy if you can't bother
	using the contents of your own hard drive. ;-P

	using mode_t = unsigned int;
	using size_t = decltype(sizeof(int));

	namespace detail
	{
	struct invalid_permission_character {};
	struct invalid_permission_string_length {};

	consteval mode_t from_readable_mode_string(const char * const s)
	{