Lesson 03 · 11 min
JWT
A signed token with data. The server stores no session, but revoking is harder.
11 minLesson 3 of 9Practice includedAsk AI on any point
A JWT has three parts separated by dots: a header, a payload, and a signature. The payload is just base64, not encryption: anyone can read it. The signature guarantees the data wasn't changed. The server checks the signature with its secret and trusts the sub, exp, and role fields.
Sign in to continue
The rest of this lesson opens after sign up
The first lesson of every course is open without an account. To read on, solve the practice and use Ask, create a free account or log in.