Question 8
A Vue frontend, a mobile app, and another backend service all call the same Flask API deployed on multiple servers. The team chooses JWT authentication. Which of the following statements are correct?
Each request can carry the token, so any server can validate it without storing a per-user session in memory.
Session-based authentication is usually easier to scale across multiple servers because no shared storage is needed. The team should have chosen this.