4 ms·
use a ttl on like a cache store, such as redis
by kensign 10y ago
use a ttl on like a cache store, such as redis
- jcoffland 10y agoYes, but this is still a deadend.
- zbjornson 10y agoHow so? It's effectively a micro-optimization that will have no real effect, but you can do a simple "exists" query when searching the revocation list, and the TTL keeps the collection small. Not advocating for JWT as it's a silly mess to do everything correctly, but it is possible.
- jcoffland 10y agoSearching a revocation list misses the point of RESTful authentication.