Hacker News Reader

Well you can block them, it just means you lose advantages of a JWT, like not requiring a database hit.

This is the main issue, there is no point in using JWT tokens for me in context of sessions. I can just use standard solution and keep normal tokens in Redis if I need to make db call anyway.

Reply on news.ycombinator.com