> expiry header JWT tokens have the expiration date embedded in the token. There is no way to force it to expire like you you can with cookies. Although force

> expiry header JWT tokens have the expiration date embedded in the token. There is no way to force it to expire like you you can with cookies. Although force is a strong word. Even with cookies if you tell the client to delete a cookie it doesn't mean it has to listen.