Quiz

How can a service cut off a JWT before it expires?

Delete the token from the server's database

Issue short-lived access tokens and revoke the refresh token

Keep a deny list of token ids, checked on each request