JSON Web Tokens

JWT is an open standard, RFC 7519 (https://tools.ietf.org/html/rfc7519) that defines a compact and self-contained format for securely transmitting information between parties in the form of a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the hash-based message authentication code (HMAC) algorithm) or a public/private key pair using the Rivest–Shamir–Adleman (RSA) encryption algorithm.

Important note

JWT RFC- 7519 (https://tools.ietf.org/html/rfc7519):

JWT is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure, enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and/or encrypted.

JWT is used to...