It requires a complex scanner with a stack to track nested data structures.

Not good for security nor speed in the use-case of a auth token!