Comment by buckle8017

JWT is complicated.

Complexity is a spec failure in security issues.

It's that simple.