4 ms·
Then just store session ID there and get rid of JWT.
by dchest 8y ago
Then just store session ID there and get rid of JWT.
- indeyets 8y agoThere's big difference between fetching session from db and validating id via short local (push distributed) revoke list. Well, that's if project is large enough to saturate storage :)