[g-b-r]

You're missing that JWT were a bad idea in the first place.

Oldish but still largely relevant: https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-ba...