3 ms·
How is issuing a JWT implicitly mean that they are storing it in a database? Couldn't they have just... not stored the data... but can still validate it?
by misnome 4y ago
How is issuing a JWT implicitly mean that they are storing it in a database? Couldn't they have just... not stored the data... but can still validate it?
- infamousjoeg 4y agoExactly this. They just need to validate the JWT signature against a JSON Web Key Set (JWKS). There's no need to store the data.