Everything is a tool in a toolbox. JWTs are not a good replacement for sessions for a couple reasons -

    * You can't have decentralized authentication AND invalidate a token.
    * You have to have complicated client side logic (opposed to a cookie with a session id) to maintain your tokens. (Much of this is "solved" by using third party packages to handle it.)

To me, it's reinventing the wheel to use JWTs as long term mutable storage. JWTs are GREAT for short term authentication between decentralized systems.

I can use a screwdriver as a makeshift hammer, but should I?