JWT
Jason Web Token (JWT)[edit]
- pronounced as jott
- consists of
<HEADER>.<PAYLOAD>.<SIGNATURE>
- <PAYLOAD> tells who is making the request
- <SIGNATURE> ensure the correctness (not tampered, trusted source)
- <SIGNATURE> = function(<HEADER>,<PAYLOAD>,<SECRET>)
- <SECRET> is known by the authentication service and by the application server
Resources[edit]
- https://jwt.io/ e.g. for decoding