Yes, I'm in favour of using Secure Cookies for authentication. But, the TDD (Trend Driven Development) people won't agree with them. They want to work with tho

Yes, I'm in favour of using Secure Cookies for authentication. But, the TDD (Trend Driven Development) people won't agree with them. They want to work with those shiny trends for a shiny resume. JWT is horrible for the web, it need JavaScript, some needs Local Storage, which is worse than Cookies itself, and the revocation is complex.