Ask HN: What do you think about this JWT revocation strategy?

  • Goes without saying that the token secret is not stored in plaintext in the db.