> No matter what variation of auth token you are using, make sure you are not just encoding BASE64 of user data like user ID and some timestamp.
Seriously, at the end of 2020 this kind of advice is necessary?
Seriously, at the end of 2020 this kind of advice is necessary?
Most of the field has never heard this advice before.
For any given bit of common wisdom, to many people it’s completely new advice: https://xkcd.com/1053/