Should I use json web tokens?

Question

JSON Web Token

In the process of learning, node encountered tokens. Is it worth doing application authentication based on them, because if you get a secret store, you can decrypt all passwords?

Answer 1

JWT is an opportunity to sign the "text" you need, give it to someone and check it (that it has not been changed) in the future when it comes back to you. Many projects use it, the flight is normal.
Passwords are not stored in it, as well as any private information, because any JWT can be viewed without a key.
And leaking a secret key is not a JWT problem, but your organization's.
PS encryption and JWT have little to do, and the key is just a signature, its leakage leads to the possibility of forging a token