Learn how JWTs carry information about a user, token, and authentication context.
Claims are pieces of information stored inside the payload of a JWT. They can describe things such as who the token belongs to, when it was issued, when it expires, or what the token is intended to be used for.
JWT defines several registered claims such as sub, iss, aud, exp, and iat, while applications can also define their own claims. Claims should contain only information that is appropriate to expose because the payload of a typical signed JWT can be decoded by anyone who has the token.
What you'll walk away knowing