News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided. Parent comment

Re:JSON Web Tokens should be avoided by endymi0n on Tuesday March 14, 2017 @05:28AM (#13866140)
s/database/in-memory-map/g should be fine - and suddenly it's pretty lightweight (subtracting service restarts and a highly available message bus of course :)
[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by sbergot on Tuesday March 14, 2017 @05:53AM (#13866223)
s/in-memory-map/cache-server/g if you happen to have a load balancer without sticky session.
[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by zimbatm on Tuesday March 14, 2017 @07:44AM (#13866656)
In both cases there is a DB somewhere storing the list. The difference is that with the blacklist the server can keep an in-memory cache because it's so small. Sessions don't need to be invalidated atomically so the blacklist can be refreshed every couple of seconds.
[ Parent | on HN ]