It's really incredible. We've come to think of it as "pre-authentication" vs "just-in-time authentication."

The hard work of generating the JWT is done in the background, out of the critical path, so the request can just fly through verification.