JWT (JSON Web Token)

An open standard for securely transmitting information between two parties as a signed JSON token. JWTs are widely used for authentication and authorization in APIs and SPAs. Common mistakes include missing signature verification, the none algorithm vulnerability, and weak signing secrets.