What is JWT and how is it used?

JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed .

JWT, or JSON Web Token, is an open standard used to share security information between two parties — a client and a server . Each JWT contains encoded JSON objects, including a set of claims. JWTs are signed using a cryptographic algorithm to ensure that the claims cannot be altered after the token is issued.

The jti (JWT ID) claim provides a unique identifier for the JWT . The identifier value MUST be assigned in a manner that ensures that there is a negligible probability that the same value will be accidentally assigned to a different data object. The jti claim can be used to prevent the JWT from being replayed.

Basically, JWT is a token format. OAuth is an standardised authorization protocol that can use JWT as a token . OAuth uses server-side and client-side storage. If you want to do real logout you must go with OAuth2.