How do you fingerprint the requests? IP address? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		dclowd9901 on May 27, 2024 \| parent \| context \| favorite \| on: Should I use JWTs for authentication tokens? How do you fingerprint the requests? IP address?

Y-bar on May 27, 2024 | [–]

Two ways, default key is [IP address + User ID] we also have a fallback with a higher limit on [IP address] only when we expect lots of attempts from e.g. a VPN.

tebbers on May 27, 2024 | [–]

The problem I had with IP address fingerprints is that we have a large number of customers all behind one hospital’s single IP address.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact