The Definitive Guide to Security in Jakarta EE: Securing Java-based Enterprise Applications with Jakarta Security, Authorization, Authentication and More

© Arjan Tijms, Teo Bais, and Werner Keil 2022

A. Tijms et al.The Definitive Guide to Security in Jakarta EEhttps://doi.org/10.1007/978-1-4842-7945-8_8

8. MicroProfile JWT

Arjan Tijms¹  , Teo Bais² and Werner Keil³

(1)

AMSTERDAM, Noord-Holland, The Netherlands

(2)

Utrecht, Utrecht, The Netherlands

(3)

Bad Homburg vdH, Hessen, Germany

 

What Is JWT?

JSON Web Token (JWT) is an open standard filed under RFC 7519 to securely transmit information between different applications or services via JSON strings.

JWT is compact, human readable, and digitally signed using a private or public key pair Identity Provider (IdP). So the integrity and authenticity of the token can be verified by other involved parties.

The main purpose of JWT is not to hide data but to ensure ...