> I want to include role (or other) information directly in the token for the sake of convenience This works up until a certain point. Once you get past simple

> I want to include role (or other) information directly in the token for the sake of convenience This works up until a certain point. Once you get past simple RBAC to more fine-grained (resource-based) authz, jwts don't scale: https://medium.com/building-carta/authz-cartas-highly-scalable-permissions-system-782a7f2c840f https://medium.com/building-carta/authz-cartas-highly-scalab...