Hacker News new | ask | show | jobs
by grandpoobah 1078 days ago
Don't reference tokens solve this problem?
1 comments

At the cost of having to lookup the validity of the reference token AND its claims on every request.

People use bearer tokens (with bearer claims) to improve system performance and availability … at the cost of increased complexity as now bearer tokens need both expiration and revocation mechanisms.

Yes but you can cache the lookup for as short a period as is desired :P