JWT is Awesome
Was about to write a rant that it's still not better than cookies & sessions, something that has been standard waay longer than JWT.<p>But this video says all I have to say (2018):<p><a href="https://www.youtube.com/watch?v=JdGOb7AxUo0" rel="nofollow">https://www.youtube.com/watch?v=JdGOb7AxUo0</a><p>1 sec takeaway (More in the video):<p><a href="https://i.imgur.com/vUYTYfS.png" rel="nofollow">https://i.imgur.com/vUYTYfS.png</a><p>That said, JWT's are great for stuff like 2-Factor via email link or redirecting from one domain to another. Single use, which it was built for.