💡𝐖𝐡𝐚𝐭 𝐚𝐫𝐞 𝐉𝐖𝐓𝐬?💡

If you work with APIs, you've probably come across JWTs. JWT stands for 𝐉𝐒𝐎𝐍 𝐖𝐞𝐛 𝐓𝐨𝐤𝐞𝐧, and it's a JSON document that contains information about a user. We call the properties of a JWT claims.

🧵🧵🧵🧵
1/

#API #jwt #auth #WebSecurity There're two types of JWTs:

👉 𝐈𝐃 𝐭𝐨𝐤𝐞𝐧𝐬 are tokens carrying user-identifying data like their name and email. You should 𝐍𝐄𝐕𝐄𝐑 use an ID token to validate access to an API.

👉 𝐀𝐜𝐜𝐞𝐬𝐬 𝐭𝐨𝐤𝐞𝐧𝐬 are tokens with claims about the right to access an API.

2/