|
|
|
|
|
by stickfigure
751 days ago
|
|
Alternatively, just don't worry about token revocation and all that complicated stuff? So you have a window of 5 minutes (or whatever your access token expiry is) that you can't revoke - is that a big deal? A simple JWT implementation isn't that complicated, but you have to accept some limitations. |
|