[evfanknitram]

Cookies are a mechanism to store data in the client. Jwt token will still need to be stored somewhere (for example in a cookie).

To me, saying Cookies vs JWT doesn't really make any sense. It's like asking what is more secure, JSON or MySql?

[amend]

I just updated my question, as it was vague. I’d appreciate your input!