What is a JSON Web Token (JWT)?
A JSON Web Token (JWT) is a compact, URL-safe token format used for securely transmitting information between parties. JWTs are commonly used for:
- Authentication: After login, a JWT is issued and sent with each request to prove identity
- Authorization: JWTs contain claims (roles, permissions) that determine access rights
- Information Exchange: Signed JWTs ensure data integrity and authenticity
- Single Sign-On (SSO): JWTs enable seamless authentication across multiple services
Structure: A JWT has 3 parts separated by dots: Header.Payload.Signature
Security Warning: Never share production JWTs. They may contain sensitive information and grant access to systems.
Try samples:
Standard JWT Claims Reference
issIssuer - who created the token
subSubject - who the token represents
audAudience - intended recipient
expExpiration - when token expires
nbfNot Before - when token becomes valid
iatIssued At - when token was created
jtiJWT ID - unique token identifier