Couldn’t this just be an argument against session tokens in general? I don’t think I saw anything negative mentioned about JWT that wouldn’t be true for any ses

Couldn’t this just be an argument against session tokens in general? I don’t think I saw anything negative mentioned about JWT that wouldn’t be true for any session token. I guess you could design a binary-first token format that’s smaller than JWT, that’s true.