Good solution! Openresty could create the JWT and add it to the forwarding headers, although the user would still need a cookie to maintain session with the pro

Good solution! Openresty could create the JWT and add it to the forwarding headers, although the user would still need a cookie to maintain session with the proxy. Only disadvantage I could see would be performance.