Hacker News Reader

TDLR; Use Redis to lookup your user data in realtime, instead of signing a token and trusting it.

+1. Redis is a great option, you can use other similar services, but just dont use JWT for something that it's not meant for.