To invalidate a JWT token, call
POST /plugins/logout
{ "token" : "current_token_value_without_bearer_prefix"}
Note that this request has to also has to have a valid authentication header.