lexik/LexikJWTAuthenticationBundle

What's the length of the JWT token?

gremo opened this issue · 2 comments

gremo commented

I can't find the information anywhere. I need to store the token in the database (for blacklisting logic)... what's the maximum length?

Spomky commented

Tokens often have an unpredictable size.
If you want to have a blacklist, you should only store the token ID (https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7) and not the token itself.

gremo commented

Thanks. You mean I need to decode the JWT token server-side and use the ID in my custom logic?

  • 👍1