JWT

Summary

JSON Web Tokens — a compact, signed token format commonly used to represent an authenticated user, sent with each API request to prove identity.

• 1Decode a real JWT at jwt.io (without a library) to see its header/payload/signature.
• 2Learn that JWT payloads are readable, not encrypted — never put secrets in them.
• 3Practice attaching a JWT as an `Authorization: Bearer <token>` header.