Stop using JWT for sessions, part 2: Why your solution doesn't workcryto.net3 pointsomgitstom10 years ago