Sorry, but to call a spade a spade, but this is a convoluted mess of faux-security without actually solving your problem statement.
Faux-security because there is no security - anyone that steals the jwt can impersonate the agent for the lifetime of the jwt - 60 minutes is an eternity.
Your solution does nothing to get to the bottom turtle, or most of the intermediate turtles.
Faux-security because there is no security - anyone that steals the jwt can impersonate the agent for the lifetime of the jwt - 60 minutes is an eternity.
Your solution does nothing to get to the bottom turtle, or most of the intermediate turtles.