title: Destroy JWT token, force logout when user gets banned or edited
body: <p>Good day friends,</p>
  
  <p>I am developing an application, in my user system add the functionality for administrators to raise the level of the account (if level 10, it's admin) or ban it from the site.</p>
  
  <p>Once the user logs in, he receives a token that contains information about the level of his account, whether it is banned or not.</p>
  
  <p>This function works perfectly, but if the user is banned, they can continue using the site until they receive a new token or it has expired, since the information is acquired from the token. I want to force the user to close their session (destroy JWT token) once it is banned or its level has been edited.</p>
  
  <p>I can verify in the routes that every time the user makes a call, the backend checks in the database if the user is banned or not. But I would like to simplify this step so that the server does not make so many calls to the database. It occurs to me to remove the user's specific token or make it invalid once it is banned from the site or its level has been altered. So the user is forced to log in again and get a new token.</p>
  
  <p>Is there a method or library that makes it easy for me to remove the tokens or make them invalid?</p>
  
  <p>Because if i enter with my admin account and try to edit my account and give it a level 1, i should not be able again to edit this user because my lvl is 1 and i need lvl 10 again for using this route functions, but i can edit it again because token authorization is valid and that shouldn't happen</p>