JSON Web Tokens
JSON Web Tokens (JWTs) are digitally signed JSON objects based on the open standard RFC 7519. These tokens provide a compact, self-contained
method for securely transmitting information between parties. These tokens are
signed with an RSA-encoded public/private key pair. The signature is calculated
using the header and body, which enables the receiver to validate that the content
has not been tampered with. Token-based applications are best for applications that
use browser and mobile clients.
A JWT takes the form of a string, consisting of three parts separated by dots:
- Header
- Payload
- Signature
This example shows a JWT:
xxxxx.yyyyy.zzzzz