How to improve the OWA security features with JWT tokens?

I agree with you @dkayiwa, JWT has some drawbacks compared to JSessionIds in terms of security :frowning: . Anyhow, I had to implement it while working on a Cloud Solutions which wanted to handshake with other API Providers and Auth Clients as @willa mentioned. That’s the idea behind me while thinking of this idea :smile:.

So then, What do you think about having this feature as a separate module which can help others to integrate other services and clients which depends on JWT?