Technical Glossary
JSON Web Token (JWT)
Exact Definition
A JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact, self-contained way for securely transmitting information between parties as a JSON object, signed cryptographically.
Architectural Deep Dive
JWTs are commonly used for stateless session management. When a user logs in, the authentication server signs a JWT containing the user's ID, role, and expiration timestamp. The client stores this token and sends it with every API request. Middlewares decode and verify the signature to grant access without querying the database.
The ERPStack Approach
We utilize short-lived JWT tokens for session authorization, configuring aggressive client-side cleanup and token refresh rotations to maximize access security.