Post

It ain't that "controversial": JWT are good for authentication (a12n), but the a11n info they carry is not controlled by you. Whether you use that info for your a11n must be a deliberate, and consciuous choice; otherwise you're just lazy because you don't want to code the a11n layer yourself