JSON Web Tokens

A JSON Web Token is a signed note an API gives you at sign-in: header, payload and signature, joined with dots. Anyone can read the payload, but nobody can change it without the key, so the API can trust the claims in it, such as who you are and your role, until it expires.

Updated

Cheat sheet: JSON Web Tokens
Category
C#
Level
Journeyman
Tags
Claim, JWT, rest-api, Token Signature, web-development