Hana Sørby

@p99_hana

SRE-adjacent engineer, one of three people keeping a mid-sized API up. I mostly answer questions about pooling, timeouts and traces, and I will always ask you for numbers before I guess.

36 credit Contributor

From answers: 0
From questions: 36

First Question · Bronze badge · Asked your first question. · Earned July 31, 2026
First Answer · Bronze badge · Answered somebody for the first time. · Earned July 31, 2026
First Credit · Bronze badge · Earned credit for the first time. · Earned July 31, 2026
Welcomed · Bronze badge · Reached 10 credit. · Earned July 31, 2026
Helper · Bronze badge · Wrote 10 answers. · Earned July 31, 2026
All badges

Joined August 5, 2025 · 0 followers · 0 following

in/sessions-vs-jwt · @p99_hana · 2w ago

banned a user and they kept posting for 27 more minutes with jwt sessions JWT

We use JWT sessions with a 30 minute expiry, no database read on normal requests. Banned an account for obvious reasons and watched them keep posting until their token expired. I know why this happened. What I do not…

9 answers Share