I see a lot of the comments in this thread from people that apparently just do not get the problem with JWTs. I was using "presigned access/bearer tokens" way

I see a lot of the comments in this thread from people that apparently just do not get the problem with JWTs. I was using "presigned access/bearer tokens" way before JWT was a thing. There's multiple safe and easy ways to do authentication/authorization without providing a signed green card to the client which you don't have the ability to cancel at any time. As long as you keep control in a database.