3 ms·
You're right, they aren't, particularly. Just moreso than alternatives - especially if > it's not required if you're going to access the DB anyways on authenti
by fknorangesite 4y ago
You're right, they aren't, particularly. Just moreso than alternatives - especially if
> it's not required if you're going to access the DB anyways on authenticated requests.
then what's the point? You're just re-inventing bearer tokens.
- Salgat 4y agoI can see one massive advantage is that you could disable the db access/verification for service-to-service communication, since revoking an internal service token is exceptionally rare (and if it occurs, you have much bigger problems to worry about).
- fknorangesite 4y agoWhich is exactly the kind of valid use case already presented in OP.