Access Management - Format
JWT
(JSON Web Token)
A signed digital token commonly used to carry identity or access information between systems
What's it for?
Carries signed information about a user's identity or permissions so another service can trust it for a limited time.
For example…
After login, the API accepts a JWT in the request header and knows which user and roles the token asserts
After login, an API receives a short-lived JWT containing the user's ID and roles, checks its signature and decides whether the request is allowed
Think of it like…
Signed wristband at a festival: staff can check the stamp without phoning the ticket office each time