Web Security · Middle · Question 39 of 75

What are the three parts of a JWT?

1Public key, private key and certificate
2Username, password and expiry
✓Correct answer: Header, payload and signature, each Base64URL-encoded and separated by dots

Explanation

The header names the algorithm, the payload holds claims like sub and exp, and the signature lets the server check that nothing was changed.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.