"Stop using JWT for sessions, part 2: Why your solution doesn't work" - joepie91
cryto.net
joepie91′s Ramblings