Diagrams

JWT Lifecycle

View as Markdown

Used in: §13.5 JWT Token Lifecycle & Refresh Audience: Backend Developer, DevOps IA ID: D20

Reading guide: Refresh tokens are single-use (jti rotation) and tracked in Redis. Logout revokes the refresh-token jti.