spring security jwt security check

 

　　1. JWT called JSON Web Token is the most popular cross-domain authentication solutions, known as requested stateless.

 

　　Principle: After the server is authenticated, generates a json object sent to the client, the client every request carries the information request, the user name as these can be stored in the json object.

 

　　JWT data structures: the head (head category Signature Algorithm) + carrier (payload expiration time user name and the like) + signature (sign mainly in order to prevent users from changing this data)

　　JWT is not encrypted by default, but can also be encrypted, after generating the original key can be encrypted again.