Comment Comment by akira2501 > I want to create a session token that I _never_ want to revalidate against a databaseThere's the middle ground as well with a long lived authentication or refresh token and a short lived authorization token.> I want to include role (or other) information directly in the token for the sake of convenienceOnce I started seriously developing cloud solutions, this became indispensable. It's not just convenient, it directly reduces expenses. parent akira2501 3 years ago
There's the middle ground as well with a long lived authentication or refresh token and a short lived authorization token.
> I want to include role (or other) information directly in the token for the sake of convenience
Once I started seriously developing cloud solutions, this became indispensable. It's not just convenient, it directly reduces expenses.