JWT is a data token format, HTTPOnly is a flag on cookie data. You can flag your JWT cookie with HTTPOnly. It's not an either-or. Could you expand on what prom

JWT is a data token format, HTTPOnly is a flag on cookie data. You can flag your JWT cookie with HTTPOnly. It's not an either-or. Could you expand on what prompted your move from the JWT standard to whatever you choose?