diff --git a/src/Storageless/Http/Configuration.php b/src/Storageless/Http/Configuration.php
index 78388cac..e88468b3 100644
--- a/src/Storageless/Http/Configuration.php
+++ b/src/Storageless/Http/Configuration.php
@@ -98,7 +98,7 @@ public function getClientFingerprintConfiguration(): FingerprintConfig
     public function withJwtConfiguration(JwtConfig $jwtConfiguration): self
     {
         $new                   = clone $this;
-        $new->jwtConfiguration = $jwtConfiguration;
+        $new->jwtConfiguration = clone $jwtConfiguration;
 
         return $new;
     }
diff --git a/test/StoragelessTest/Http/ConfigurationTest.php b/test/StoragelessTest/Http/ConfigurationTest.php
index 2beb6b19..504ef29b 100644
--- a/test/StoragelessTest/Http/ConfigurationTest.php
+++ b/test/StoragelessTest/Http/ConfigurationTest.php
@@ -94,7 +94,7 @@ public function testImmutability(): void
         $jwtConfig   = clone $this->jwtConfig;
         $rightConfig = $leftConfig->withJwtConfiguration($jwtConfig);
         self::assertNotSame($leftConfig, $rightConfig);
-        self::assertSame($jwtConfig, $rightConfig->getJwtConfiguration());
+        self::assertNotSame($jwtConfig, $rightConfig->getJwtConfiguration());
 
         $clock      = FrozenClock::fromUTC();
         $leftConfig = $rightConfig->withClock($clock);