I agree with you @dkayiwa, JWT has some drawbacks compared to JSessionIds in terms of security . Anyhow, I had to implement it while working on a Cloud Solutions which wanted to handshake with other API Providers and Auth Clients as @willa mentioned. That’s the idea behind me while thinking of this idea
.
So then, What do you think about having this feature as a separate module which can help others to integrate other services and clients which depends on JWT?