DEV Community

Discussion on: What really is the difference between session and token based authentication

Collapse
 
chandelieraxel profile image
Chandelier Axel

Hey ! Pretty much, yes. Basically, once the server create the JWT, it'll "sign" it with a secured secret (an overcomplicated string, most likely). When your client send the JWT with the request, the server will "verify" the token, using the secret key you used to sign it.