JWT
Problem
One service establishes information about a user.
Another service needs that information without making a database call back to the issuer for every request.
Solution — JWT
A JWT can carry signed claims:
{
"sub": "alice",
"role": "reader",
"exp": ...
}
The receiver can verify the signature and validate the claims.
Core idea: JWT is a compact format for carrying verifiable claims between systems.