What is JWT?

This article introduces you what is JWT, the content is very detailed, interested friends can use for reference, hope to be helpful to you.

What is JSON Web Token (JWT)

JSON Web Token (JWT), as an open standard (RFC 7519), defines a concise and self-contained method for the secure transmission of information in the form of JSON objects between two parties of communication. Because of the digital signature, the information of these communications can be verified and trusted.

JWT can use the secret key (secret) for signature (using the HMAC algorithm) or the public / private key pair (public/private key) of the RSA or ECDSA algorithm.

Although JWT can sign between the two parties of the communication by providing a secret, we will pay more attention to * * signed (signed) * * token.

The data integrity (integrity) in it can be verified by signed tokens, while encrypted tokens can be hide claims against other parties.

When a token (token) is signed with a public key / private key pair (public/private key), only the party who holds the private key to sign is signed.

Comparison of key terms in Chinese and English

Token-token

Secret-secret key

Signature-signature

Claims-requirements or data

On what is JWT to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.