2021-10-14 UTC
# 
jamietanna It depends on whether you want state stored / stateless - DB is generally easiest if you've got a DB already, but stateless can allow resource servers to i.e. verify a JWT's signature without calling the token introspection endpoint - both not without tradeoffs