2 ms·
> You can use a revocation list with JWT if necessary Yes and let me just add that in many cases the use case is such that a revocation list is not even needed
by tasuki 4mo ago
> You can use a revocation list with JWT if necessary
Yes and let me just add that in many cases the use case is such that a revocation list is not even needed and then JWTs are actually stateless and it's a small win for everyone.
- tracker1 4mo agoExactly... especially if the expiration is a tolerance window you can handle without revocation at all. I'm a pretty big fan for using it inter-service, APIs and SPA systems.