JWT payload

Creator
Creator
Seonglae ChoSeonglae Cho
Created
Created
2021 Apr 5 3:26
Editor
Edited
Edited
2025 Oct 22 12:50
Refs
Refs

Claim Set

The JWT Claim Set is the actual body of the token that contains the information to be included. Since JWT refers to token information as claims, the body section holding all this information is called the Claim Set. The Claim Set consists of multiple pairs of Claim Names (keys) and Claim Values (values).
You can include information like user IDs here and use them directly without needing to query the database.
Registered claim names are those registered in IANA JSON Web Token Claims. While not mandatory, they are standard values defined for common use. The following list shows registered claim names, all of which are optional:
  • iss: The issuer who issued the token
  • sub: The subject of the claim, representing the context of the token
  • aud: The audience that will use this token
  • exp: Expiration time - tokens past this time should be rejected
  • nbf: Not Before, meaning the token should not be processed before this time
  • iat: Issued At, the time when the token was issued
  • jti: JWT ID, an identifier for the token
Public claim names are defined for use in tokens but are publicly registered to prevent collisions, while private claim names refer to names agreed upon between the server and client.
 
 
 
 
 
 
 

Recommendations