JWT, In Depth

What a JSON Web Token really is: three base64 parts, a signature you must verify, and the stateless-auth tradeoffs (plus the mistakes that cause breaches).

1. Three Parts and a Signature
2. Issuing, Sending, and Verifying
3. Where It Breaks