JWT apps to be deprecated in favor of Server-to-Server OAuth

Another thing to note, that isn’t obvious and not in the documentation (yet), is that you may need to build an access token rotation system. Each time you request an access token for a particular token index (by default, you only get one), it invalidates the previous access token.