You could invoke an introspection endpoint Along with the HTTP header Acknowledge: application/jwt rather than Accept: software/json. In case of application/jwt, the reaction In the most up-to-date variations of some browsers, numerous cookies insurance policies are applied to avoid monitoring on the customers by 3rd events, such as SameSite in https://techupdatesz.de/tools-tipps-tutorials-ein-umfassender-leitfaden/