JWT claims | What is a JWT claim?

preview_player
Показать описание

00:00 What are JWT claims?
00:42 Difference between a claim and a key value pair
02:07 public claims are claims with a predefined meaning

According to RFC-7519, a claim is a piece of information about a subject that is represented as a name/value pair consisting of a claim name and a claim value. Most people stumble about claims when they first start to look into JSON Web Tokens. Initially the name claim might be confusing because a claim just seems like a "normal" key value pair. People talk about claims nonetheless because we are not just talking about any key value pair, but about key value pairs that exist within the context of a security token. This security token can be MACed or digitally signed.

Claims are special key value pairs because they are statements made by whoever created the token about a particular subject. So using the term "claim" is just more precise than talking about key/value pairs.
Рекомендации по теме
Комментарии
Автор

What do you think about this video?
Please let me know in the comments below

jgoebel
Автор

Thanks for the quick explanation. I was a bit confused at first reading the official documentation but you explained it really well in 2.5 minutes.

YogeshwarSinghSisodiya
Автор

Could not be more clear. Thank you for this!

alessandroformica
Автор

So basically after signature authorization if i want to get my user detail from server, i can use sub claim with unique value to iterate through db.

hiteshsuthar