Denylist

Also written: revoked list

A list of tokens that are no longer allowed, each kept in Redis until the token would have expired anyway. It lets JWTs be revoked.