This is a great overview. I am itching to write a library for devs to automate their JWT security tests. A CI integration test would go a long way to ensure that JWT authentication is implemented properly.