This is possible if you support the 'jti' claim[1]. There's a discussion of an implementation of it here[2]. [1]: http://self-issued.info/docs/draft-ietf-oauth

This is possible if you support the 'jti' claim[1]. There's a discussion of an implementation of it here[2]. [1]: http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html#jtiDef http://self-issued.info/docs/draft-ietf-oauth-json-web-token... [2]: https://auth0.com/blog/blacklist-json-web-token-api-keys/ https://auth0.com/blog/blacklist-json-web-token-api-keys/