JWTs and JOSE have a bad reputation for footguns and ignoring modern cryptographic principles.

PASETO is the “mostly fixed” version of JWTs, but if you’re looking for something with more features, biscuits are quite interesting:

https://www.biscuitsec.org