3 ms·

The server.

• stephenr 7y ago
  ... ok so assuming you then don’t have a HA environment (Really!?) if the server is down the sessions and the tokens are irrelevant because there’s nothing being served and nothing to use/check them and provide back resources.
• james_s_tayler 7y ago
  You don't have to store them purely in-process. The session data itself can live in Redis. You can scale sessions beyond a single web server.