How Big Apps Know It鈥檚 You Without Your Password 馃攼 After login, your phone talks to the servers hundreds of times. Checking a session in Redis for every request means a million extra lookups per second at peak. A signed JWT fixes that. The login server signs it with a private key, and each service checks it with the public key, no Redis call needed. It expires in 15 minutes, and a rotating refresh token gets you a new one quietly. Session IDs or JWTs, which side are you on? Drop it below 馃憞 #Sy
2:58
How Big Apps Know It鈥檚 You Without Your Password 馃攼 After login, your phone talks to the servers hundreds of times. Checking a session in Redis for every request means a million extra lookups per second at peak. A signed JWT fixes that. The login server signs it with a private key, and each service checks it with the public key, no Redis call needed. It expires in 15 minutes, and a rotating refresh token gets you a new one quietly. Session IDs or JWTs, which side are you on? Drop it below 馃憞 #Sy
96.2K views2 weeks ago
TikTokkodekloud
See more
Static thumbnail place holder