Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Exactly this. They just need to validate the JWT signature against a JSON Web Key Set (JWKS). There's no need to store the data.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: