JWTs

[mafrosis]

I read your article on O'Reilly, and was piqued by the suggestion that JWTs are bad. I read the article you cited:

http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/

Really that post concerns itself with sessions vs JWTs in a normal browser-monolith setup, not microservices. Digging around on HN I discovered the author of said article acknowledging that microservices are not what he was talking about.

https://news.ycombinator.com/item?id=11897490

It might make sense to be clear about why you think JWTs are bad - some developers might not do the research that I did this morning ;)