3 ms·
JWT are not encrypted, they include an HMAC signature to prove that the token claims (which are a Base64 encoded JSON object) have not been modified.
by rhinoceraptor 9y ago
JWT are not encrypted, they include an HMAC signature to prove that the token claims (which are a Base64 encoded JSON object) have not been modified.
- alayne 9y agoJWT can be encrypted. https://tools.ietf.org/html/rfc7519#page-26 https://tools.ietf.org/html/rfc7519#page-26