Is it ok to store user credentials in the JWT

Question

Is it ok to store user credentials (username / password) in the JWT (so sign it and verify the resulted token later)?

I heard that

Answer 1

You should use jwt only to store a token which your API will consume. The token will be generated after a successful login and it can be attached to any request sent to your API and all request should be proceeded only if the token is valid.