You can store the JWT in a central database and use it in the same way as a session token. And you can put a revocation URL into the claims. But JWT has still t

You can store the JWT in a central database and use it in the same way as a session token. And you can put a revocation URL into the claims. But JWT has still the null cipher problem.