Hacker News new | ask | show | jobs
by holtalanm 2315 days ago
if you have gotten to the point where you need to hit the database to verify the JWT, something is wrong. Either need to turn down your JWT expiry time, or refresh your JWT more often, or both.