Meaning
JSON Web Token; a compact, URL-safe means of cryptographically representing claims to be transferred between two parties.
Three examples from work
Authentication flow
DevUpon successful login, the server issues a signed JWT containing user roles and tenant ID.
Frontend DevI'll store it in secure HTTP-only cookies and pass it in the Authorization header.
Security check
Security LeadWhat algorithm are we using to sign our JWT payloads?
DevRS256 with an asymmetric public/private key pair.
Session timeout
QAThe user was kicked out to the login screen after fifteen minutes of inactivity.
DevThe short-lived access JWT expired; we need to implement silent token refresh.
Often pronounced as 'jot' or spelled out 'J-W-T'. A JWT consists of three parts separated by dots: header, payload, and signature.