Who cares what the current thinking is - define your problem and implement the solution that makes the most sense to you. IMHO, the problems with JWT are overb

Who cares what the current thinking is - define your problem and implement the solution that makes the most sense to you. IMHO, the problems with JWT are overblown. Yes, people have made huge mistakes implementing JWTs, but the fault lies with the implementation not the standard. Stateless authentication tokens are always going to problems with revocation. There is always going to be a limit on how much you can cram into them. These problems are not unique to JWTs. JWT has the advantage of being a standard with good support across languages. Other schemes might be slightly better at handling larger amounts of session data. Take your pick.