From Dev.to
JWT verifiers need an explicit token-purpose policy
JWT verifiers need an explicit token-purpose policy A JSON Web Token can carry a request, a session, an access grant, a logout event, or a signed claim from an external service. If a verifier accept...