What if you have two servers, one in japan and one in central europe? Where do the sessions live?

With JWTs, you would only need to replicate your revocation list of the last X hours (X being your JWT default lifetime) and probably be in the megabytes for the total list. Easy to replicate that ever 5-10seconds to all your locations.

You probably don’t need to replicate it? The users hitting your Japan server aren’t going to suddenly hit your central eu server?

Except when they do...