Skip to content

Latest commit

 

History

History
28 lines (17 loc) · 1.28 KB

README.md

File metadata and controls

28 lines (17 loc) · 1.28 KB

JSON WEB TOKEN(JWT) Tutorial

JSON Web Token is a proposed Internet standard for creating data with optional signature and/or optional encryption whose payload holds JSON that asserts some number of claims. The tokens are signed either using a private secret or a public/private key.

It is compact, readable and digitally signed using a private key/ or a public key pair by the Identity Provider(IdP). So the integrity and authenticity of the token can be verified by other parties involved.

The purpose of using JWT is not to hide data but to ensure the authenticity of the data. JWT is signed and encoded, not encrypted.

JWT is a token based stateless authentication mechanism. Since it is a client-side based stateless session, server doesn't have to completely rely on a datastore(database) to save session information.

STRUCTURE OF JWT

A JSON Web Token consists of 3 parts separated by a period.

header.payload.signature

STRUCTURE_OF_JWT

Source

WEB DEV SIMPLIFIED