What is JWT (JSON Web Token)?

JWT (JSON Web Token) is a compact, secure way of transmitting information between two parties as a JSON object. It is commonly used for authentication and authorization in modern web applications.

In simple terms, JWT allows a server to verify who you are without storing your session data.

---

📌 Why Do We Use JWT?

• Stateless authentication (no session storage)

• Secure data transfer

• Widely used in REST APIs

• Works well with microservices

---

📌 Structure of JWT

A JWT consists of 3 parts, separated by dots (.):

Header.Payload.Signature

1️⃣ Header

Contains algorithm and token type
Example:

{
  "alg": "HS256",
  "typ": "JWT"
}

---

2️⃣ Payload

Contains user data (claims)
Example:

{
  "userId": 101,
  "role": "ADMIN"
}

---

3️⃣ Signature

Used to verify token integrity
Created using:

• Header + Payload

• Secret key

• Algorithm (e.g., HS256)

---

🔹 Example JWT Token

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9
.
eyJ1c2VySWQiOjEwMSwicm9sZSI6IkFETUlOIn0
.
abc123signature

---

📌 How JWT Works

1. User logs in with credentials

2. Server verifies user

3. Server generates JWT

4. Client stores token (browser/local storage)

5. Client sends token in every request (Authorization header)

6. Server validates token and responds

---

🔹 Authorization Header Example

Authorization: Bearer <JWT_TOKEN>

---

🚀 Advantages of JWT

• ✔️ Stateless (no server memory needed)

• ✔️ Scalable for microservices

• ✔️ Secure with signature

• ✔️ Compact and easy to send

---

⚠️ Disadvantages

• ❌ Token cannot be easily revoked

• ❌ Larger than session IDs

• ❌ Requires secure storage on client

---

🎯 Real-Time Use Cases

• Login authentication systems 🔐

• REST API security

• Single Sign-On (SSO)

• Microservices authentication

---

⚡ Simple Analogy

• 🎫 JWT = Movie ticket

  • Once issued, you don’t need to show ID again

  • The ticket itself proves your identity

---

🔥 JWT in Java (Spring Boot)

In real-world Java applications, JWT is implemented using:

• Spring Security

• Libraries like jjwt or java-jwt

---

✅ Conclusion

JWT (JSON Web Token) is a powerful way to implement secure, stateless authentication in modern applications. It eliminates the need for server-side sessions and is widely used in REST APIs and microservices.

Mastering JWT is essential for backend developers, especially if you're preparing through Top Core JAVA Online Training in Hyderabad.