Need Security Tokens for Java? Try JPaseto

To circumvent the issues with JSON Web Tokens, try PASETO; a new security token format, made for quick and easy accessibility, free of the complications of JWT. PASETO, or Platform Agnostic SEcurity TOkens was created by Scott Arciszewski as a draft RFC spec. PASETO can provide the needed security functions that applications need, in addition to reducing the scope of JavaScript Object Signing and Encryption, (JOSE) family of specs, including JWT. 

PASETO is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.