For information on JWT’s
I use server side session management.
But if you are using implicit you don’t have a server