News for hackers. Stuff that matters.
Re:JWT vs. Opaque Tokens by Aeolun on Thursday September 29, 2022 @08:27PM (#33029212)
Mostly the fact you can check their validity without going to the database.

If you have one you can keep using it without extra network roundtrips as long as it doesn’t expire.

Only the validity of refresh tokens (for generating new access tokens) is checked.

There are no comments on this comment yet.