I recently started using JWT and one Big question is that ” we can’t really delete a token on demand ?”

Doubt: As of my info JWT are stored in cookies as hashes, so even if a website clears user cookies when you log-out, this token is still valid until its expiry if you have stored it somewhere.

Issue: If some how i make a request and send this token to server even after logging out it will be validated.

So how is this issue managed ?
Or am i missing some thing here ?