[geraldwhen]

This is exactly how many banks handle auth because 1.) jwt is mandated and 2.) so is session revocation.