Kapil Patel
1 min readJun 7, 2019

--

No need to store JWT(Token) , when you create JWT you sign them with a secret key, now anyone in the world can read JWT data but can not modify it, if it is modified then while checking token at the server side , token verification method can see that JWT data has been modified and thus rejects the request.

Let me repeat: JWT doesn’t need to be stored in database because it already contains enough data to prove it’s authenticity.

--

--

Kapil Patel
Kapil Patel

Written by Kapil Patel

Software engineer | loves working in a startup like environment

No responses yet