Skip to content

Commit 375c042

Browse files
authored
Update docs/self-hosted/oel/oauth2/stateless-jwt.mdx
1 parent e8d867b commit 375c042

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/self-hosted/oel/oauth2/stateless-jwt.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,7 @@ The `/userinfo` endpoint requires database lookups to retrieve the consent sessi
150150
Stateless JWT access tokens are suitable for scenarios where:
151151

152152
- High throughput is required: Applications with high token issuance rates benefit from eliminating database writes
153-
- Token revocation is not needed: Workloads that rely solely on JWT expiration for token lifecycle management
153+
- Token revocation is not needed: Workloads that rely solely on JWT expiration for token lifecycle management, or have a dedicated mechanism for revoking tokens
154154
- Introspection is not used: Resource servers validate tokens using JWT signature verification rather than introspection
155155
- Userinfo endpoint is not required: Client applications do not call the userinfo endpoint for user information
156156
- JWT access tokens are used: The feature only applies when clients or the global strategy is configured for JWT tokens

0 commit comments

Comments
 (0)