JWT (JSON Web Token)
JWT is a compact token format used to represent claims securely.
Updated: 2026-03-05
Definition
JWT is commonly used in modern authentication/authorization flows to carry claims (user, scopes, expiry).
JWTs are typically signed (and sometimes encrypted) so recipients can verify integrity.
Key points
- Contains claims + expiry
- Signed to prevent tampering
- Must be validated (iss/aud/exp)
Common mistakes
- Storing long-lived JWTs without rotation/revocation strategy.
- Not checking token expiry and audience.
Related exams
Related terms
Want to practice this in exam-style questions?
Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.
Go to exams