4 ms·
No, you have lost ONE of the major values of JWTs. You still enjoy a lot of the others (standardized data structure decodable by both sides, library support, ea
by cybrox 3y ago
No, you have lost ONE of the major values of JWTs. You still enjoy a lot of the others (standardized data structure decodable by both sides, library support, easy custom payload).
Also, DB calls are not necessary, when it comes to scaling, in-memory caching is a very valid option, so a DB read is only necessary occasionally.
Yes, you lose some of the benefits of JWT but that's inherently expected when using them for something that goes beyond their original capability.
- preseinger 3y agothe only unique advantage of JWT-type auth is reducing load on auth backends everything else you mention is equally available in other, simpler, auth schemes
- cybrox 3y agoYes, I didn't disagree with that. All I'm saying if you're already using JWTs, you're not locked out completely from implementing these features. It just comes with a drawback that might be worth it, depending on your customerbase and team size.