Reading this (and the comments) painfully reminds me of the tabs vs spaces
discussion.

I myself only have a opinions on whether to use JWTs and where to store them,
but no well researched resources to point to.

https://dev.to/masakudamatsu/json-web-tokens-are-not-meant-for-authenticating-the-same-user-repeatedly-use-session-tokens-instead-pno