We also did an episode of the podcast with Geoffroy:
https://securitycryptographywhatever.com/2022/01/29/biscuits...
https://securitycryptographywhatever.com/2022/01/29/biscuits...
I'd recommend listening (or reading the transcripts) to anyone who's needs or wants to understand more about JWT and other tokens
(And if you're not, check out the other episodes still. That podcast is great, some of the episodes get really deep into the cryptography weeds but if I get trough them I still feel like I learned something :-) thanks for making it)