4 ms·

So you're saying you can have sane sessions as long as you have some server-side storage? :-)

• tehlike 8y ago
  Yes, of course, jwt can facilitate that. Using it as a replacement is not good, i agree.
  • jrochkind1 8y ago
    But what value is it adding over ordinary 'bearer token' sessions in that case?
    • Spivak 8y ago
      When you aren't invalidating tokens your app server can serve all static but restricted content without checking with the DB.