- [Instructor] JWT, or JSON Web Token,
is an open standard that is used to securely transmit
information in between parties.
The JSON object primarily consists of three items,
a header, the payload, and the signature.
So go to jwt.io and then scroll all the way down
to when you see the Encoded and the Decoded section here.
That's going to help you understand
what I'm just about to explain.
So the header has usually two parts,
the type of token and the hashing algorithm used
to encrypt the token.
Then, the payload consists of the metadata
from the request party that is required from the server.
Some typical information you'll see in the payload
are issuer of the request, expiration, name, et cetera.
Finally, the signature is what proves the requester
is who he says he is
and is how the request is properly validated,
which is what you see in this section.
Services like AuthO uses JWT
and we talk briefly about the service later on.
In fact, the JWT documentation
was crafted by the AuthO team.
So what is the use of JWT?
This is the best way to securely transmit information
across parties on the web.
So the payload could be used for any type of information
you'd like to transmit from two parties.
And quite evidently,
this can be used to authenticate a user.
So when the user is registered to a site,
then the token will be used to validate the user
as he makes several requests for data.
So there you have it.
Let's move on.