I evaluated JWT recently and found it so overcomplex and full of footguns that it was unacceptable for a security-critical component. It boggles the mind that this was designed as recently as 2015.

I plan on going for a simple bespoke solution which just uses an off-the-shelf algorithm to sign a structured payload (likely BARE), which in addition to being less full of shit will make for smaller and more managable tokens.