Can jwts be invalidated. I have heard it can be used even after logout till the expiration time
JWTs (JSON Web Tokens) are self-contained and stateless tokens, which means that once they are issued and signed by the server, they cannot be invalidated or revoked before their expiration time, as there is no central authority or server-side state involved in token verification.