3 ms·
JWT is just storing more info than you would with a cookie but pretending it's secure by encrypting it with an algorithm the browser has access to.
by jlebrech 9y ago
JWT is just storing more info than you would with a cookie but pretending it's secure by encrypting it with an algorithm the browser has access to.
- rhinoceraptor 9y agoJWT are not encrypted, they include an HMAC signature to prove that the token claims (which are a Base64 encoded JSON object) have not been modified.
- alayne 9y agoJWT can be encrypted. https://tools.ietf.org/html/rfc7519#page-26 https://tools.ietf.org/html/rfc7519#page-26