3 ms·
> But when using a JWT, my server actually does not need ANY db access. You don't need any db access with signed cookies either. Just stash your data in a sign
by JodieBenitez 4y ago
> But when using a JWT, my server actually does not need ANY db access.
You don't need any db access with signed cookies either. Just stash your data in a signed cookie and you're done. Should you need more than 4k for session data, maybe it's time to rethink about what should be stored in the session and what should be stored in the db.
- imnotjames 4y agoI know a good spec for signing json data to store it as a token here, too