Best practices for server-side handling of JWT tokens [closed]

Answer 1

IETF have a RFC in progress in the oAuth Working Group see : https://tools.ietf.org/id/draft-ietf-oauth-jwt-bcp-05.html