> There are only two hard things in computer science … cache invalidation is one of them. I mean, it's a pithy saying, but TTL invalidation is a problem you ha

> There are only two hard things in computer science … cache invalidation is one of them. I mean, it's a pithy saying, but TTL invalidation is a problem you have to solve with JWT too. Caching tokens is the easiest possible cache invalidation problem: definitionally, you know a priori exactly when the token is invalid.