[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-json-web-token::en":3,"gloss-cluster-json-web-token::en":26,"gloss-next-json-web-token::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"json-web-token","integration","JSON Web Token (JWT)","A JSON Web Token (JWT) is a compact, self-contained way to represent claims — facts about a user or client — as a signed string that can be passed between parties. It has three Base64-encoded parts separated by dots: a header, a payload of claims (like user ID, roles, and an expiry timestamp), and a signature. The signature is the key idea: because it's computed with a secret or private key, any server holding the matching key can verify the token is authentic and untampered without calling a database. That statelessness is why JWTs are everywhere in API auth and single sign-on — the token itself carries the identity. For SaaS builders, JWTs are what you'll typically receive after an OAuth login or issue for service-to-service calls. Two practical cautions: the payload is signed, not encrypted, so never put secrets in it — anyone can read the claims. And because you can't easily revoke a stateless token before it expires, keep lifetimes short and pair them with refresh tokens.","A JWT packs claims about a user into a signed, self-contained string — fast to verify without a database lookup, and correspondingly hard to revoke early.",null,[11,14,17,20,23],{"slug":12,"name":13},"api-key","API Key",{"slug":15,"name":16},"oauth","OAuth",{"slug":18,"name":19},"oauth-scopes","OAuth Scopes",{"slug":21,"name":22},"service-account","Service Account",{"slug":24,"name":25},"sso","Single Sign-On (SSO)",[27,31,34,37,40,43,47,50,53,56,59,60],{"slug":28,"category":5,"name":29,"updated_at":30},"backend-for-frontend","Backend for Frontend (BFF)","2026-08-24T02:46:38+00:00",{"slug":32,"category":5,"name":33,"updated_at":30},"concurrency-limit","Concurrency Limit",{"slug":35,"category":5,"name":36,"updated_at":30},"event-ordering","Event Ordering",{"slug":38,"category":5,"name":39,"updated_at":30},"field-mapping","Field Mapping",{"slug":41,"category":5,"name":42,"updated_at":30},"function-schema","Function Schema",{"slug":44,"category":5,"name":45,"updated_at":46},"grpc","gRPC","2026-08-24T02:46:37+00:00",{"slug":48,"category":5,"name":49,"updated_at":30},"integration-marketplace","Integration Marketplace",{"slug":51,"category":5,"name":52,"updated_at":30},"ip-allowlist","IP Allowlist",{"slug":54,"category":5,"name":55,"updated_at":30},"mcp-server","MCP Server",{"slug":57,"category":5,"name":58,"updated_at":30},"mutual-tls","Mutual TLS (mTLS)",{"slug":18,"category":5,"name":19,"updated_at":30},{"slug":61,"category":5,"name":62,"updated_at":30},"openapi-specification","OpenAPI Specification"]