3 ms·
You can store the user info in the JWT so you don't need to hit the database to get user info every time. I usually just store an id in each issued token and st
by njknsdf 10y ago
You can store the user info in the JWT so you don't need to hit the database to get user info every time. I usually just store an id in each issued token and store/remove it from redis or memory as needed for invalidating it.
- ekryski 10y agoYou have to be careful that you are not leaking sensitive info though, as the JWT payload is meant to be visible on the client as well.