Understand what is inside a JWT and how its three simple parts work together.
A JSON Web Token, or JWT, is a compact string that can carry information between a client and a server. A JWT is usually made up of three parts separated by dots: the header, payload, and signature.
The header describes how the token is protected, the payload contains claims, and the signature helps the server verify that the token has not been changed. The important thing to remember is that a normal JWT is encoded, not automatically encrypted, so its payload should not be treated like a secret.
What you'll walk away knowing