I have this rant about people creating problems for themselves. A perfect example is when SPA's were created, but it broke browser history. So we get a new st

I have this rant about people creating problems for themselves. A perfect example is when SPA's were created, but it broke browser history. So we get a new standard with the ability to edit browser history. I feel like refresh/access tokens fall into the same vein. If you need that don't use JWT's. The choice of JWT is the problem here, refresh/access tokens are a workaround.