All Questions
Api Gateway medium

Why is 'Stateless Token Validation' (e.g., using JWTs) significantly more scalable at the Gateway level than 'Stateful Validation' (e.g., using Opaque/Reference Tokens)?

  1. A JWTs are mathematically guaranteed to never expire, so they never need to be re-checked.
  2. B The Gateway can verify the JWT's signature locally using a public key, eliminating a blocking network call to an external Authentication Service or Database.
  3. C JWTs use a special form of quantum encryption that makes them 10x smaller than opaque tokens.
  4. D The Gateway stores the entire user database in its L1 cache for instant JWT lookup.

One system design question a day, with spaced repetition so the ones you miss come back.

Get the app

Related questions