Which is the point of the post.
If you need to do revocation you need to call an external server.
If you need to call an external server why do JWT?
If you need to do revocation you need to call an external server.
If you need to call an external server why do JWT?