Dexter

Fullstack .NET Developer, C# 😍😍 Angular Java hybrid(Cordova), ionic React and Node Js. ManU supporter

[Eminent 🇵🇹 @stayEminent]

Any manager that cannot adapt his system to accommodate and maximize both should be sacked

[Dexter @bcodes_weezy]

@2k04Sean

[Dexter @bcodes_weezy]

@manutdspaces And this money was used to increase the man united stocks!!! Bro 👀

[Dexter @bcodes_weezy]

@manutdspaces 250 from Jim and 80 from Jim and INEOS

[Dexter @bcodes_weezy]

@manutdspaces So the board was responsible for the formation leak 😭😭😭😪😪😪

[Dexter @bcodes_weezy]

@Cantonadevils I pray you are wrong !!! 😑

[Dexter @bcodes_weezy]

@manutdspaces Pep flexible with 500M every transfer window!!! Bro 😎

[Dexter @bcodes_weezy]

@manutdspaces Now we are back to Player power !!!!! We will be alright

[Dexter @bcodes_weezy]

@cagiago_ I love what you be cooking 🧑‍🍳

[Dexter @bcodes_weezy]

Bros leave them!!!!!!

[ThePrimeagen @ThePrimeagen]

pls don't vibe code a network protocol

thanks for coming to my TEDx talk

[Dexter @bcodes_weezy]

This is wrong design. HTTP is stateless so design a stateless system

You should implement a logout mechanism if you really need to log out. If not that’s why we have token revalidation.

Either short expiry or logout

Redis shouldn’t be part of your auth. It’s an overkill

[Cap-EO 👨🏾‍💻 @EOEboh]

When it's not okay is when the expiry time is long. If a token expires quickly (15-60 minutes), the risk window reduces.

My recommended solution for this would be a Token Blacklist/Denylist

How it works:

When a user logs out, store their JWT (or just the jti claim) in Redis.

Set the Redis entry to expire at the same time the JWT would naturally expire

On every authenticated request, check if the token is in the blacklist before accepting it
If blacklisted, reject the request even though the JWT signature is valid

Why this approach works ?
You're maintaining a list of "revoked but not yet expired" tokens. And also the check is fast (Redis lookup is fast)

Storage is temporary and automatically cleaned up when tokens expire naturally

There are other solutions to this issue, what else would you do?

[Dexter @bcodes_weezy]

@Oluwafadererami Your mouth is not good( in Yoruba)

[Dexter @bcodes_weezy]

Say you no go talk one stupid thing na lie

[— @ConfusedUnited]

@DexxterUtd Yup. And then he gets to say “told ya” and blame the kids for his terrible result. Terrible coach terrible platforming

[Dexter @bcodes_weezy]

@ManUtdInPidgin Guys just accept Amorim has ended player power in Man United

[Dexter @bcodes_weezy]

@ManUtdInPidgin Asides Bruno, Mbuemo and amad which other players will start in the top 6 teams

[Dexter @bcodes_weezy]

@ManUtdInPidgin The Culture in United needs to change….

[Dexter @bcodes_weezy]

@TosinOlugbenga Bro like what if you have to write a code for an Emulated device and no auth.

Simple one like a ussd gateway, let me see you use your auth library.

[Dexter @bcodes_weezy]

If you do not understand the message passed here, then you are not a programmer nor a software engineer

[Tosin Olugbenga @TosinOlugbenga]

To the global community of tech gatekeepers triggered by this tweet.

You can use 3rd party auth services but basic authentication implementation shouldn’t be a big deal if you’re a software engineer.

Before this tweet will get to Iraq or Iran, make you all calm down.

It’s not that deep.

[Dexter @bcodes_weezy]

If your are using nextJS it comes with a concept called a BFF. It’s abstracts your api calls from your app itself and you can use whatever as your backend.

You can even plug a database directly as your backend

[Om @Om_Codes_]

Hey guys
Building a website with Next.js for frontend.
Should I also use Next.js API routes / Server Actions as backend, or go with a separate backend (Node/Express or any other) ?

Looking for advice on scalability, clean architecture & future growth.

[Dexter @bcodes_weezy]

@olawale2_ Amorim wanted to kill the game, when we do that before we make mistakes