Some people made the distinction here, jwt on the front end vs the micro services across the network. I've experienced more than once, issues where the auth se

Some people made the distinction here, jwt on the front end vs the micro services across the network. I've experienced more than once, issues where the auth service has bugs and the logged out session is still valid for a long time. Or an attacker that figured out the micro services blueprint and now had authed access to the entire network. Jwt is still useful between services, however the front end can do just fine with a session id that can be easily revoked.