top | item 44032673

(no title)

bekacru | 9 months ago

- Not right now, but there’s already an open issue and a PR in progress.

- We don’t use JWTs directly, and sessions always require state (it’s not stateless). And yeah, both the client and server handles automatic session refresh.

- Yes, we support both multiple sessions or having different organizations open in different tab: https://www.better-auth.com/docs/plugins/multi-session

- Yes, that’s possible, you just need to set the `prompt` parameter to `select_account`

discuss

order

theogravity|9 months ago

As another asked, "why?" on no JWT? It makes interfacing with our API servers so much easier as we don't need to maintain infra for sessions and wouldn't be limited by the 4kb limit for sending cookies.

motorest|9 months ago

> We don’t use JWTs directly

Why?

hungryhobbit|9 months ago

Evidently they prefer to be less secure by default.