JWT

Summary

JSON Web Tokens — a compact, signed token format that lets a stateless server verify a user's identity without looking anything up in a database on every request.

• 1Generate and verify a JWT manually using a library like `jsonwebtoken`.
• 2Decode a real JWT at jwt.io and inspect its header, payload and signature.
• 3Learn why JWT payloads are readable, not encrypted — never put secrets in them.