JWT (JSON Web Token)

A compact, URL-safe means of representing claims to be transferred between two parties

A JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object.

JWTs consist of three parts:

  • Header: Contains metadata about the token
  • Payload: Contains claims (statements about the user)
  • Signature: Ensures token integrity

JWTs are commonly used for:

  • Authentication
  • Information exchange
  • Authorization
  • Single sign-on (SSO)