Abstract
- Stands for JSON Web Token
- Base64 encoded
- Can be stored inside Cookie, Request Body, used for Stateless Authentication
JWT Header
- Consists of two parts: the type of the token, which is JWT, and the Digital Signature algorithm being used to generate the JWT Signature, such as HMAC SHA256 or RSA
JWT Claims
- Key-value pair inside the token that describes the user and the JWT itself
- You can learn about the different claims and their purposes by pasting a JWT token into the editor below
JWT Signature
- A Digital Signature made from JWT Header and JWT Claims, the purpose is to verify the integrity of the JWT