JWT vs Cookies

[sachalifs]

Should we stick to client side cookies mechanism we have right now?

JWT is not being used properly...

[gvilarino]

I think JWT is the reasonable evolution to auth handling; especially in a multi-tenant environment as ours.

We should, of course, look at the pros and cons here. This thread seems a good place to start. I think it'd be good if we comment with links to stuff to read on this matter and we could make a decision then.

[sachalifs]

Also this: https://auth0.com/blog/2014/01/27/ten-things-you-should-know-about-tokens-and-cookies/#token-cross-domains