>>2217the idea that jwt tokens
fail to scale is kind of a myth if you aren't doing something stupid like storing massive amounts of metadata in the payload. if you keep them small, you don't need a database lookup for every single request anyway.
it only becomes a headache when you realize you can't easily revoke them without adding a blacklist back to your stateful backend