[paulmooney]

Yes, I'm the author. Long as the JWT spec implements a strong method of encryption , it's a good option.