JWT are effectively that, a signed token that contains the session information. You could build a session cache, either in memory or out of process, but it wou

JWT are effectively that, a signed token that contains the session information. You could build a session cache, either in memory or out of process, but it would still be more work than the token approach