yep. however, the token is then not "stateless" anymore since you have to take note of the blacklisted state. however, once you really care about the security

yep. however, the token is then not "stateless" anymore since you have to take note of the blacklisted state. however, once you really care about the security perimeter, i think the requirement/wish "stateless" must be dropped.