Using Spring Boot 3.2 and Spring Security 6+ this demo project shows how to create a REST API App that uses a Filter in order to check JWT tokens in cookies and set the Authentication object in SecurityContext.

Youtube Tutorial for this app - also shows how to invalidate refresh tokens