JWT

JSON(Javascript Object Notation): ๋ฐ์ดํ„ฐ๋ฅผ ์ฃผ๊ณ  ๋ฐ›๊ธฐ ์œ„ํ•ด key, value์Œ์œผ๋กœ ์ด๋ฃจ์–ด์ง„ ๋ฐ์ดํ„ฐ ๊ฐ์ฒด

JWT

  • JSON ํ˜•์‹์˜ ํ† ํฐ

  • ์ฃผ๋กœ HTTP ํ—ค๋”์— ์‹ฃ์–ด๋ณด๋‚ธ๋‹ค

  • Header, Payload, Signatrue๋กœ ๊ตฌ์„ฑ ex) [Header].[Payload].[Signature]

Header: ์‚ฌ์šฉํ•  ํ•ด์‹œ ์•Œ๊ณ ๋ฆฌ์ฆ˜ ๋“ฑ ๋ฉ”ํƒ€ ์ •๋ณด

Payload: key, value ํ˜•์‹์˜ ์ •๋ณด(claim) โ†’ ์„œ๋ฒ„ ์ „๋‹ฌํ•  ๋ฐ์ดํ„ฐ

Signature: Header + Payload + Secret Key ํ•ด์‹ฑํ•œ ๊ฐ’

โ†’ Header, Payload base64๋กœ ์ธ์ฝ”๋”ฉํ•œ ๊ฐ’์— ํ‚ค๊ฐ’์„ ๋ถ™์—ฌ ํ•ด์‹ฑ

Last updated