Introduction:
JWT stands for JSON Web Token. JWTs are commonly used for authentication and authorization purposes in modern web applications and APIs.
JWT Parts:
A JWT consists of three parts: a header, a payload, and a signature, which are concatenated and encoded as a single string using Base64URL encoding. Each part contains different types of information
Header: The header typically contains metadata about the type of token and the cryptographic algorithms used for signing or encrypting the token. Common algorithms include HMAC, RSA, or ECDSA.
Payload: The payload, also known as the claims or the body, carries the actual data or claims about the authenticated user or other relevant information. Claims can include standard claims (e.g., issuer, subject, expiration time) and custom claims defined by the application.
Signature: The signature is generated by combining the encoded header, encoded payload and a secret key (public/private key pair) using the specified cryptographic algorithm from the header. The signature allows the recipient of the token to verify its integrity & authenticity
