I have read OAuth2 and its statelessness using JWT as token. Token expires based on expired time, then how do I control token like blacklist and block its access immediately without being stateful?
As far as I found the solution is you need a database that store token blacklist. Then now what is the different with stateful approach?