I've used jwt with react, making sure to secure the token properly. In my next project I want to use openid so users don't have to manually create a new account.