4 ms·
Don't reference tokens solve this problem?
by grandpoobah 3y ago
Don't reference tokens solve this problem?
- SgtBastard 3y agoAt the cost of having to lookup the validity of the reference token AND its claims on every request. People use bearer tokens (with bearer claims) to improve system performance and availability … at the cost of increased complexity as now bearer tokens need both expiration and revocation mechanisms.
- grandpoobah 3y agoYes but you can cache the lookup for as short a period as is desired :P