JWT (JSON Web Token)

A JWT (JSON Web Token, RFC 7519) is a compact and secure format for representing claims between two parties. It consists of three Base64URL-encoded parts separated by dots: the header (algorithm), the payload (claims) and the signature. The Certyneo API uses signed JWTs (HS256 or RS256) for session management and API call authentication, ensuring that tokens have not been tampered with. Access JWTs have a short lifespan, complemented by long-lived refresh tokens.