News for hackers. Stuff that matters.

A comment on JWT should not be your default for sessions. Parent comment

Re:JWT should not be your default for sessions by Alex3917 on Thursday May 13, 2021 @08:18AM (#27141253)
> If you need to make a DB trip on every request

There's no extra DB request, assuming you need to lookup the user model on each request already.

[ Parent | on HN ]
Re:JWT should not be your default for sessions by jakelazaroff on Thursday May 13, 2021 @09:26AM (#27141808)
In that case, you can avoid DB overhead by joining the user when you query the session. I'm still not sure what advantage JWTs have in this scenario.
[ Parent | on HN ]