Glossary: Building APIs with Node.js

JWT_SECRET

Also written: secret

The long random secret the server uses to sign tokens. Anyone who has it can forge tokens, so it's never committed to Git.