JWT
JSON Web Token
A JSON Web Token is a compact, URL-safe token format for transmitting claims between two parties. JWTs contain a header, payload, and signature that allow recipients to verify the token's integrity and authenticity.
Cómo se usa en ciberseguridad
Security engineers issue JWTs for stateless API authentication and session management. Penetration testers check for weak signing algorithms (like "none"), missing expiration claims, and secret key brute-forcing. Architects decide between signed (JWS) and encrypted (JWE) tokens based on sensitivity.
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.