Yes, there's a database (pgsql) for persistence, though no 'session state' is stored there. All of the middleware/services are stateless. And yes, I realize n

Yes, there's a database (pgsql) for persistence, though no 'session state' is stored there. All of the middleware/services are stateless. And yes, I realize now that I could accomplish much the same thing without using JWT (a decision made some time ago, when everyone was raving about JWT), but I've got bigger priorities than ripping up my auth system (which to the best of my knowledge is working acceptably well) ATM. But I do plan to take a look at it and perhaps migrate to something else in the future :)