What is JWT token medium?

JWT, or JSON Web Token, is an open standard used to share security information between two parties — a client and a server . Each JWT contains encoded JSON objects, including a set of claims. JWTs are signed using a cryptographic algorithm to ensure that the claims cannot be altered after the token is issued.

Although JWT does eliminate the database lookup, it introduces security issues and other complexities while doing so . Security is binary—either it’s secure or it’s not. Thus making it dangerous to use JWT for user sessions.

In This Article

A JWT needs to be stored in a safe place inside the user’s browser . If you store it inside localStorage, it’s accessible by any script inside your page.

JWT or JSON Web Token is an open standard (RFC 7519) which is used to securely transfer information between two parties . To understand the detail concept of JWT, it’s very important to first know about Session tokens. Session Tokens are an encrypted unique strings that are used to identify Session Instances.

To authenticate a user, a client application must send a JSON Web Token (JWT) in the authorization header of the HTTP request to your backend API . API Gateway validates the token on behalf of your API, so you don’t have to add any code in your API to process the authentication.