SecurityIntermediate

JWT

Also known as JSON Web Token

A compact format for carrying claims, such as a user ID, in a token that can be signed or encrypted.

In the real world

An API validates a signed JWT's signature, issuer, audience, and expiration before accepting its claims.

Related

Go a little deeper