I'm currently implementing an OAuth 2.0 Architecture for my RESTful API.

With each request I set up an Authorization Bearer Token in the HTTP Header for all my clients to make Authorized Requests.

Authorization: Bearer sdflksd3r4823vkn95-03850432 

I understand that it's common practice to just accept the token in the API until the expiration date. But say if a user wanted to revoke the token, I would need to employ a method of checking the status of the token with each request.

So I was thinking of going to the Db to check for every HTTP request. I have a feeling that this won't scale nicely due to performance reasons.

So I was wondering if a solution like Redis would be appropriate for very fast single reads of the access token status?

Edit
Report