I am building a system for a product which requires authentication and authorization. Naturally I have chosen using OAuth 2.0 as it is a commonly used protocol and has proven to be useful.
I am considering implementing tokens without storage - as described here: http://bshaffer.github.io/oauth2-server-php-docs/overview/crypto-tokens/
This would save me a lot of trouble with token storage, and of course means I have to go to the DB only for the initial login (when I issue the token).
Since I am not seeing this in common use - Are there any substantial cons to this approach? Is this a big security compromise?
I understand that I won't have some functionality (like logout deleting the token), but I feel this will have very big benefits when it comes to scaling the application.