Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 245652

A JSON Web Token (JWT) is a signed token provided by a server to a client which can be used to validate certain claims, e.g. identity, that can be used for a third party, e.g. a service provider.

2 votes
2 answers
438 views

Placing authorization data on JWT claims

If they attempt to request authenticated resources, they will need the JWT stored as a bearer token in their HTTP auth header. … When this happens, I'll verify/validate the JWT, and if its good, give them access. …
hotmeatballsoup's user avatar
0 votes
2 answers
297 views

Data Model for JWT claims

My understanding is that JWTs are meant to be fully decodeable, meaning I can be given any old JWT, plop it into jwt.io, and see the claims and information, expiry, etc. contained in the JWT. … My understanding is that to create a JWT, you need to sign it with a secret, and that when you present the server with a JWT for authentication, it somehow compares the secret that was used to sign the …
hotmeatballsoup's user avatar