Jwts Vs. Sessions: Lessons From Building a Real-World Auth Kit in Nestjs
Posted2 months ago
medium.comTechstory
calmpositive
Debate
20/100
AuthenticationJwtSession ManagementNestjs
Key topics
Authentication
Jwt
Session Management
Nestjs
The author shares their experience building a real-world Auth Kit in NestJS, exploring the trade-offs between JWTs and sessions, and proposes a hybrid approach; the discussion revolves around the challenges of balancing these two authentication methods.
Snapshot generated from the HN discussion
Discussion Activity
Light discussionFirst comment
N/A
Peak period
1
Start
Avg / period
1
Key moments
- 01Story posted
Nov 10, 2025 at 5:33 AM EST
2 months ago
Step 01 - 02First comment
Nov 10, 2025 at 5:33 AM EST
0s after posting
Step 02 - 03Peak activity
1 comments in Start
Hottest window of the conversation
Step 03 - 04Latest activity
Nov 10, 2025 at 5:33 AM EST
2 months ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
ID: 45874546Type: storyLast synced: 11/17/2025, 5:59:12 AM
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
After testing both under real-world conditions — logout, refresh rotation, and device tracking — I realized neither model was enough on its own.
This post shares what I learned about blending them into a hybrid approach.
Curious to hear how others are handling this balance in production systems.