lil5 :golang: 🌱 on Nostr: Essentially the only reason it needs to check into a database on every request is to ...

Essentially the only reason it needs to check into a database on every request is to validate a per user integer, allowing for backend cookie invalidation per user

Without, signed jwt’s arent able to be invalidated per user

JWT’s are not encrypted, JWE’s are:
https://stackoverflow.com/questions/454048/what-is-the-difference-between-encrypting-and-signing-in-asymmetric-encryption#454069
Use the word encrypted for a jwt miss informs newcomers