title: Invalidate JWT Token in NodeJS
body: <p>I followed this <a href="https://auth0.com/blog/2014/01/07/angularjs-authentication-with-cookies-vs-token/" rel="noreferrer">tutorial</a> for using JWT token. The token expiry is set to only 5 minutes, but what if I wanted to invalidate the token after 1 minute of use? I want to be able to make an API call to <code>/api/logout</code> and that should delete my token. </p>
  
  <p>I'm using Express and Node. </p>
  
  <p>It seems like from what I could gather to do my option is to have a token db that stores the token. When I want to expire my token, I then expire/remove the token from the DB. </p>
  
  <p>I've also seen people casually say "remove" the token from the physical hard space, but I cannot figure out where the token is physically stored for me to remove it.</p>