Несколько статей "за" и "против":
• https://medium.com/swlh/why-do-we-need-the-json-web-token-jwt-in-the-modern-web-8490a7284482,
• https://hasura.io/blog/best-practices-of-using-jwt-with-graphql/,
• https://jolicode.com/blog/why-you-dont-need-jwt,
• https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid.
• https://medium.com/swlh/why-do-we-need-the-json-web-token-jwt-in-the-modern-web-8490a7284482,
• https://hasura.io/blog/best-practices-of-using-jwt-with-graphql/,
• https://jolicode.com/blog/why-you-dont-need-jwt,
• https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid.