JaniBiking

if used jwt then "refresh-token" is placed on the blacklist (blacklisted/logged out). If the refresh token is used, it is rejected, but the access token still works until its expiration...