JWT: Difference between revisions
| Line 6: | Line 6: | ||
* <SIGNATURE> ensure the correctness (not tampered, trusted source) | * <SIGNATURE> ensure the correctness (not tampered, trusted source) | ||
** <SIGNATURE> = function(<HEADER>,<PAYLOAD>,<SECRET) | ** <SIGNATURE> = function(<HEADER>,<PAYLOAD>,<SECRET) | ||
===Resources=== | |||
* https://jwt.io/ e.g. for decoding | |||
Revision as of 08:40, 23 November 2021
Jason Web Token (JWT)
- pronounced as jott
- consists of
<HEADER>.<PAYLOAD>.<SIGNATURE>
- <PAYLOAD> tells who is making the request
- <SIGNATURE> ensure the correctness (not tampered, trusted source)
- <SIGNATURE> = function(<HEADER>,<PAYLOAD>,<SECRET)
Resources
- https://jwt.io/ e.g. for decoding