Glossary: Web App Security and Authentication

JWT

Also written: JSON Web Token

A signed token that carries its data inside it, so the client keeps it. An ID token is a JWT; a JWT works until it expires unless you keep a block list.