News for hackers. Stuff that matters.

A comment on Should I Use jwts For Authentication Tokens?. Parent comment

Re:Should I Use jwts For Authentication Tokens? by bcrosby95 on Monday May 27, 2024 @10:15PM (#40496747)
Why not just stick your auth token in the cache. It's supposed to expire anyways.

Back in the day we used memcached for our primary store for all sorts of ephemeral things. Including user sessions.

[ Parent | on HN ]
Re:Should I Use jwts For Authentication Tokens? by withinboredom on Tuesday May 28, 2024 @02:22AM (#40497902)
Items are evicted from caches all the time for non-expired reasons. Memcached, in particular has "slabs" (spaces for objects of a certain size) and once those slabs are full, items are evicted to make space for new items.
[ Parent | on HN ]