[cjlarose]

At the time of writing (September 2013), the JWT spec would have been only on it's 12th draft--it's had 19 follow-up drafts since then. It's possible that the author didn't know about them at all.

[paulmooney]

As you say, the JWT spec was not as mature at the time of writing.

[chatmasta]

(Assuming you're the author -- who knows though.) Now that the JWT spec is mature and there are some nice implementations of it, do you think it's a good option for token-based authentication?

[paulmooney]

Yes, I'm the author. Long as the JWT spec implements a strong method of encryption , it's a good option.