Give the Developer the option to Choose between JWT or Sessions

[yezz123]

As a developer, I can choose whether to go with JWT or Sessions.

But also I can choose whether to return the session or the jwt refresh/access tokens as a json response for users to set it in localStorage

But it's highly recommended to set the http only cookie with the sameSite attribute set to lax which should be the default option.