Authentication and Authorization using JWT Token and Roles-Based Access Control

What is JWT?
JSON Web Token is a proposed Internet standard for creating data with optional signature and/or optional encryption whose payload holds JSON that asserts some number of claims. The tokens are signed either using a private secret or a public/private key.

What is RBAC?
Role-Based Access Control (RBAC) attributes permissions to a user based on their business responsibilities. As the most common access control system, it determines access based on your role in the company—ensuring lower-level employees aren’t gaining access to high-level information.