JWT is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of the JWT, and the header and signature are base64url encoded and joined by a period (.).