Posts tagged: #sessions

Design notes for limiting replay when bearer tokens leak, including jti, session state, device signals, rotation, and proof of possession.