[g-b-r]

This seems still largely relevant to me: https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-ba...