https://nalar.dev/tags/paseto/ Recent content in PASETO on Nalar Hugo en-us Sat, 19 Sep 2026 00:00:00 +0000 https://nalar.dev/paseto-public-local-tokens-do-not-solve-session-revocation/ Sat, 19 Sep 2026 00:00:00 +0000 https://nalar.dev/paseto-public-local-tokens-do-not-solve-session-revocation/ <p>A PASETO token can protect claims cryptographically without knowing whether the user has logged out. That boundary matters more than the usual JWT-versus-PASETO comparison: changing the token format does not create session revocation.</p> <p>PASETO gives each token an explicit version and purpose. With Version 4, <code>v4.public</code> signs a message with Ed25519, while <code>v4.local</code> encrypts and authenticates a message with symmetric cryptography. Those choices determine who can read a token and who can create or verify it. They do not determine whether a previously valid token should still be accepted after a session changes.</p>