JWT vs Database Sessions for Web App Authentication
I'm building a web application and need to implement one authentication/authorization mechanism for a project.
I'm considering:
- JWT
- JWE
- Database-backed sessions
Which approach would you recommend for a typical web application, and why? I'm especially interested in security, complexity, scalability, and ease of implementation.
Thanks!