nostr auth IS a web token in its design. i've been noticing this discussion and i don't understand what the problem anyone is trying to solve, a problem that doesn't exist, as far as i can tell.
hzrd149 was pretty thorough in the specification and i have no problems with my implementation since a couple weeks now, and the last parts were fixing the file extension in the front end, not anything in the relay's blossom service
