JWT vs Sessions — The Part Nobody Tells You Until It's in Production

Almost every auth tutorial I've read in the last five years reaches for JWT. It's the default now. And the reasons given are always the same three: it's stateless, it scales, and you don't hit the dat