Coming soon — this article is being prepared. Below are its question, intended outcome, and place in the story.
The question
What can be read from a JWT, and what does its signature prove?
What we will work through
Inspect a synthetic JWT and distinguish decoding from signature verification.
Before you begin
Previously covered: Authentication, authorization, and sessions: separate responsibilities.