Comment by ars

2 days ago

Does it actually improve speed though? The DB check is simply "does this key exist", it can be done in a memory database, it doesn't have to be the same DB as the rest of your data.

Validating a token requires running encryption level algorithms to check the signing signature, and those are not fast.