Hey all, we are in a process of rolling out our own hasura auth.
Few things I noticed:
1. Hasura auth DOES NOT invalidate old tokens on token refresh. This results in a millions of active refresh tokens
2. refresh_tokens table does not have an index on expires_at and does a full scan on POST /token call
3. I'm seeing a random regular p99 latency spike of the /token endpoint. Any thoughts why?