Using opaque tokens (sessions) + JWT gives a good balance between speed and revocability
r
Using opaque tokens (sessions) + JWT gives a good balance between speed and revocability