3 ms·
OAuth2 is not inherently stateless.
by apitman 1y ago
OAuth2 is not inherently stateless.
- catlifeonmars 1y agoGood call. I said OAuth but what I meant was OIDC and specifically JWT. OAuth (not OIDC) implementations MAY use opaque access tokens that require server side state to validate.
- apitman 1y agoAh makes sense