Why do you think that https://github.com/grempe/rack-json_web_token_auth is a good alternative to Rack::ContentSecurityPolicy
Why do you think that https://github.com/grempe/rack-json_web_token_auth is a good alternative to Rack::ContentSecurityPolicy