A JWT is an encoded string that contains of set of claims. These claims are either digitally signed by a JSON Web Signature (JWS) or encrypted by JSON Web Encryption (JWE). JWT is a self-contained way to transmit claims securely between parties. The links for these Request for Comments (RFC) proposed standards are provided in the Further reading section of this chapter.

JWT structure

A JWT is an encoded string such as aaa.bbb.ccc, consisting of the following three parts separated by dots (.):

Header

Payload

Signature

https://www.pluralsight.com/courses/jwt-fundamentals