Hacker News new | ask | show | jobs
by damncabbage 3839 days ago
> ... being signed in is in-memory state.

Can be in-memory state. Everything beyond toy-sized I've ever worked on has externalised this sort of state to a database of some kind, if only so you can run a second copy for the sake of failover. I don't believe your example is relevant.

1 comments

Or used a signed assertion that is verified with a secret.