The only disadvantage is that: 1. You are now passing large blobs of data over the network more frequently than just a signed session ID 2. If you want to ensu

The only disadvantage is that: 1. You are now passing large blobs of data over the network more frequently than just a signed session ID 2. If you want to ensure consistency of your data (for security purposes), that extra data embedded in the claims of the JWT are useless since you need to query for them for freshness after validating the session anyway.