[scrollaway]

JWTs cannot be invalidated without giving up the main reason why you would use them: reliance on an authentication server for validating sessions.