What is the point of using JWT with ASPNet.Identity?

Question

I implemented ASPNET.Identity with a custom JWTProvider. However, does it make sense to use JWT with ASPNET.Identity instead of baking in a regular token carrier in Identity already? Does security increase? Does this just add more complexity to the app?

UPDATE In terms of using the Oauth token provider and custom JWTProvider. Does this get your extra security?

Answer 1

Both are very different from XSRF/CSRF.

OAuth XSRF . , CSRF JWT . CSRF . CSRF JWT .