1 min readJun 7, 2019
No need to store JWT(Token) , when you create JWT you sign them with a secret key, now anyone in the world can read JWT data but can not modify it, if it is modified then while checking token at the server side , token verification method can see that JWT data has been modified and thus rejects the request.
Let me repeat: JWT doesn’t need to be stored in database because it already contains enough data to prove it’s authenticity.