Another idea I have heard is to encode your feature flags and entitlements as a bitwise string, and include this string in your customer's signed auth token. Th

Another idea I have heard is to encode your feature flags and entitlements as a bitwise string, and include this string in your customer's signed auth token. This way, your front end and back end don't have to hit your entitlements API all the time. When they change plans, just refresh the auth token.