> You won't know which tokens should be considered expired in-advance, you still have to call the DB for every request to check You can verify the signature be

> You won't know which tokens should be considered expired in-advance, you still have to call the DB for every request to check You can verify the signature before calling the DB.