داخل JWT

في هذا الدرس

read a JWT and name its three parts.

الموضوعات المخطط لها

• A JWT (JSON Web Token) is three Base64URL parts joined by dots: header.payload.signature.
• Header: algorithm and type (alg, typ). Payload: claims such as sub (subject), iss (issuer), aud (audience), exp (expiry), iat.
• The signature proves the header and payload were not changed, by a key.
• The payload is encoded, not encrypted: anyone can read it. Never put secrets or personal data in claims.
• Keep tokens small.