2 ms·
Until you need revocation. Which is to say until you need a working authentication system. JWTs solve a nonexistent problem in the 99.9% case but are so very,
by eropple 7y ago
Until you need revocation.
Which is to say until you need a working authentication system.
JWTs solve a nonexistent problem in the 99.9% case but are so very, very bloggable that they've brainwormed the population but good.
- spookthesunset 7y agoIt’s a trade off dude. You trade off the ability to revoke a token instantly for fewer backend calls. For most parts of your site (99.9%) that trade off is fine. For the parts where it isn’t fine you... call the auth server every request. JWT doesn’t mean you give up anything....