#ZegnatStateless always sounds fun when it is described as “look mum, no datatabase”, but then when you actually start implementing a full authorization flow and find out you need to bring in encryption to hide things from clients, keep track of ttls, etc., it is no longer as fun ;)