[szastamasta]

Then you need a single point of failure that is handling session validation. Without it part of your app might work even without your sessions storage.

[coder543]

You can store a JWT in a session cookie. You don’t need a SPoF for session validation, if that’s not what you want.