DEV Community

Discussion on: How do you handle role/permissions updates with JWT?

Collapse
 
jamesmh profile image
James Hickey

Agree. This also helps the JWT to be as slim as possible.

I tend to only want the key that can help me get to information about a resource (usually some type of ID).

"Normal" methods of dealing with performance issues should be applied at this point if having to fetch authorization details is causing issues.