title: Nodejs Express for web aplication JWT with database or sessions to authenticate users
body: <p>I'm developing a NodeJs with Express server and I have many problems with the JWT authentication that is suposed to be the new standard.</p>
  
  <p>The main problem is when I have an admin users manager section in my app. I don't know a "good" way to delete or avoid client tokens access.</p>
  
  <p>I read about doing a blacklist DB with tokens with a short expiration time defined, but the idea is to allow users to be logged for months and don't have to rewrite the login data (something like facebook). In this mode I think that the blacklist DB will be a huge database.</p>
  
  <p>Another option could be to keep all tokens in a DB and verify all requests against that DB deleting tokens when an user is deleted.</p>
  
  <p>or simply validate all requests against users DB testing if the users exists. This method uses lots of DB interactions.</p>
  
  <p>I could have a problem about the same user whith tokens in different devices.</p>
  
  <p>On the other side, in the frontend I will have to navigate via ajax or adding the token dynamically to all href links. (Probably a better way?)</p>
  
  <p>Must I use any of thes methods? Are there a better solution? Could be better the use of sessions? </p>