We moved from jwt to opaque tokens and it's been fantastic. We also moved from using redis as our token store to using postgres (aurora). Querying against over

We moved from jwt to opaque tokens and it's been fantastic. We also moved from using redis as our token store to using postgres (aurora). Querying against over 100M on postgres adds one or two millisecond p99 latency to all requests. That's perfectly fine. In fact, that's about the same performance we saw with Redis. Both were over the network, so I presume the network accounts for most of that delay. Having them in an rdbms is so convenient. It makes customer facing feature like enumerating current sessions very simple. It makes token expiration and remote logout simple. It makes spotting weird bugs much easier. I can't recommend it enough.