Complete guide to JWT authentication in Django using djangorestframework-simplejwt. Covers token refresh, blacklisting, custom claims, logout, and all SIMPLE_JWT settings.
BLACKLIST_AFTER_ROTATION needs the token_blacklist app in INSTALLED_APPS and a migration. The errors you get, the silent failure if you skip it, and the fix.