Using opaque tokens (sessions) + JWT gives a good ...
# security-discussion
r
Using opaque tokens (sessions) + JWT gives a good balance between speed and revocability