Nothing wrong with JWT bearer tokens as a technology. However, too many times they're implemented incorrectly or without forethought. I've seen a few teams who

Nothing wrong with JWT bearer tokens as a technology. However, too many times they're implemented incorrectly or without forethought. I've seen a few teams who used the bearer token, set the age really high, and never bothered to implement a refresh mechanism. Fast forward a few months and someone says it is not possible to log someone out of our service.