Feature-by-Feature Study #2 — JWT Authentication: An Access Pass the Server Doesn't Remember
How JWT solves the weakness of the session approach (the server having to remember every session). Covers the structure that packs information into the token itself (header, payload, signature), the trap that the payload is just base64, not encryption, code for creating and verifying tokens with jjwt, and the new problem JWT introduces (no revocation).
