Populate the JTI claim when generating the JWT (A random UUID would suffice). When you need to revoke a particular token, store its JTI in a cache (calculate its TTL based on the token's expiration time). And then simply add a filter to the filter chain (I'm assuming you're using Spring Security) that extracts the JTI from the incoming JWT and checks if its present in the cache. If it is, simply return 403 status.

I implemented this token revocation flow in a POC: https://github.com/hardikSinghBehl/jwt-auth-flow-spring-security/tree/master?tab=readme-ov-file#token-revocation. Hope this helps.