-
HenrikJoreteg wesbos long shot, but do either of you use the encoded data in the JWT in the client? ie. embed user info and decode it?
-
HenrikJoreteg wesbos to clarify, I'm not suggesting a full verify in the client, that would happen on server. Just decoding the "body"