Comment Comment by Rapzid > maintain a table of valid JWTs and expire them when the user logs outWouldn't you just need a list of logged-out JWTs? And maintain entries until the JWT would have expired?.And that's if you really cared. Some people would be fine with the client and server participating in the log out and a low-ish JWT expiry. parent Rapzid 5 years ago
Wouldn't you just need a list of logged-out JWTs? And maintain entries until the JWT would have expired?.
And that's if you really cared. Some people would be fine with the client and server participating in the log out and a low-ish JWT expiry.