#jwt

Authentication: sessions vs JWT

How Linkstash's opaque session tokens actually work end to end, and the real tradeoff against JWTs: revocability versus a database lookup on every request.