I understand that it is old, but for others.
Try not to store tokens anywhere unless you need an object to cancel them. If you intend not to store them, this means that you (or should) use JTT-formatted tokens.
Spring, by default, includes user data in a bearer JWT access token that is created.
Therefore, your client / resource server, which is the recipient of the JWT token, has sufficient knowledge to automatically create an authentication object and control access to resources.
source share