What if you aren't using a browser? There's no difference between browser authentication via a cookie and app authentication via a token. The cookie stores the

What if you aren't using a browser? There's no difference between browser authentication via a cookie and app authentication via a token. The cookie stores the session token, the app store the session token. What if you explicitly want to know that the contents of the auth token aren't modified There is no content in an auth token — it's a random number. What if you want to work with a IdP that only provides JWTs to offer centralized authentication and user management? When there's no choice, there's no choice.