[njknsdf]

You can store the user info in the JWT so you don't need to hit the database to get user info every time. I usually just store an id in each issued token and store/remove it from redis or memory as needed for invalidating it.

[ekryski]

You have to be careful that you are not leaking sensitive info though, as the JWT payload is meant to be visible on the client as well.