@User Thank you for the response. The token will not need to store any custom payload other than a way to identify the user. Like github, I also want to alert the user via an email when his token is about to expire.