I have an asp.net core 3.1 web API where I am using JWT tokens to authenticate a user. Once the user gets a token, he/she can use it until it expires.