How is JWT generated?

Question

Java

I have a Java server, I generate a token using the io.jsonwebtoken. The token is generated based on the user's login. As far as I understand, the hashing algorithm does not change from time to time, that is, it turns out that the token also never changes? Thus, the situation with a once-compromised token can only be resolved by changing the login?

Answer 1

The token includes a timestamp up to which it is valid.

Answer 2

For clarity, take a look at site
https://jwt.io/
You will see that jwt consists of 3 parts.
Pay attention to this part
https://i.imgur.com/cZLrN7Y.png