I would like your opinion about Sending a JWT back to the client.

What is preferable and why, and what are the advantages and disadvantages?

In a Cookie?

In the Request Body?

Thank you.