NestJS · Authentication · Senior · Comparison
Session-based auth with Nest — considerations?
Short Interview Answer
express-session/fastify session store (Redis), CSRF for cookie auth, and secure cookie flags.
Detailed Explanation
Stateless JWT vs sessions trade-offs still apply. Sticky sessions without external store don't scale.