Invalidate token on password change

[bclaim]

Hello,

Currently, when a user changes their password, the token is not invalidated. This could be a security issue, especially during these times. I noticed there is a similar thread mentioning this which has gone off-topic, so I am creating a new issue which will hopefully stay on-topic. Is there a chance this could be implemented with priority?

Thank you.

[pesseba]

This feature is present in this another plugin: https://wordpress.org/plugins/jwt-auth/

[bclaim]

We would appreciate if @Tmeister could provide their input as this issue concerns this plugin and to also keep this post on-topic.