Search RFCs

RFC Editor

File formats:

Status:

PROPOSED STANDARD

Updated by:

RFC 7797,RFC 8725

Authors:

M. Jones
J. Bradley
N. Sakimura

Stream:

IETF

Source:

oauth (sec)

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC7519

Discuss this RFC: Send questions or comments to the mailing listoauth@ietf.org

Other actions:View Errata  | Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 7519

Abstract

JSON Web Token (JWT) is a compact, URL-safe means of representingclaims to be transferred between two parties. The claims in a JWTare encoded as a JSON object that is used as the payload of a JSONWeb Signature (JWS) structure or as the plaintext of a JSON WebEncryption (JWE) structure, enabling the claims to be digitallysigned or integrity protected with a Message Authentication Code(MAC) and/or encrypted.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.