Hey all, we're thinking of switching to Ory Kratos (and possibly the Ory Cloud offerings). Our site currently just uses GH auth exclusively. We have an open API anyone can access. How are Ory tokens structured. Are they a JWT by default?

Kratos uses cookies/sessions, however I believe if you have it infront of Oathkeeper, you can use Authenticators and Mutators config options to produce & sign a JWT. I'm not sure how the cloud offering works, but I imagine it might be similar.