Full Stack Development with JHipster

How JWT works

When a user logs in to the system, a token is generated based on the payload (that is, the user information and secret key). The generated token is stored locally. For all future requests, this token is added to the request and the application will validate the token before responding to the request:

The token will be in this format:

Authorization: Bearer <token>

In JHipster, we use JJWT (Java-based JSON Web Tokens) from Okta. This is a simplified builder pattern-based library used to generate and sign the token as a producer, and parse and validate the token as a consumer.

Creating the token:

public class TokenProvider { ... ...