Destroying of Session identifiers by drwetter · Pull Request #598 · OWASP/Top10
... and avoiding encouragements of JWT denylists at the server side. See #544.
github.com