• 0 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: September 27th, 2023

help-circle



  • Just my opinion here but using a signed JWT instead of a server local variable seems needlessly risky for communicating a price. Considering the potential liability to the company if your signing token is compromised I’d much rather send the prices to the user and keep a server local copy tied to the account/session/auth token. When the user tries to confirm the price we’d just pull the information from local storage.

    In terms of your primary question though… I can see the UX advantage of honoring the expired token if prices were stable but I’d probably roll out an MVP without that feature fully developed but with some logging to flag how often it’d activate - throw the statistics at business people and let them ponder how often it’d activate.

    That all said, this is an API not a GUI so I really don’t care as much about the UX since the consumer can just automate resubmitting for a new token - especially if we’re putting together an SDK or code samples for clients to run the requests and double especially if we’re controlling both ends with a distributed binary (but that doesn’t sound like the case here).



  • xmunk@sh.itjust.workstoMemes@lemmy.mlOpinions
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    1 year ago

    Not necessarily, Leninists and OG Marxists usually don’t get lumped in with Tankies - while Trotskists definitely should be. Tankies accept blatant authoritarianism as an acceptable cost to achieve socialism, non-Tankies reject authoritarian regimes.

    … and super-Tankies are Pol Pot apologists.