What if I put a jwt in a session cookie?
The post is not descriptive enough
It should explain how to not store JWT instead of just saying JWT is bad.