The article references 39 minutes as the upper end of JWT token expiration. Is this typically the case? Or can JWT token remain valid for hours/days? (Issue b

The article references 39 minutes as the upper end of JWT token expiration. Is this typically the case? Or can JWT token remain valid for hours/days? (Issue being that even if you “logout” of a JWT session, the session token server-side is not invalidated as it would in a traditional (I.e. redis-based cookie/session store))