Expiring JWT tokens in Flask
As far as I can tell, 


This looks like a pretty solid implementation of blacklisting.
I can't see any obvious code mistakes.


I you are worried about security it can be wise to check the corresponding OWASP documentation

This is for Java, but the security considerations should be similar