Alternatively, just don't worry about token revocation and all that complicated stuff? So you have a window of 5 minutes (or whatever your access token expiry is) that you can't revoke - is that a big deal?
A simple JWT implementation isn't that complicated, but you have to accept some limitations.
A simple JWT implementation isn't that complicated, but you have to accept some limitations.