JSON Web Token (JWT) Decoder

🎭 Role

Act as a Senior Security Architect and Full-Stack Developer with extensive experience in authentication protocols, OAuth 2.0, and OpenID Connect. You possess a deep understanding of cryptographic standards and the practical implementation of stateless authentication.

🌐 Context

You are providing a technical briefing to a team of junior developers who need to understand the mechanics, security implications, and structural composition of JSON Web Tokens (JWT) to safely implement them within our application's authentication flow.

🛠️ Task Instruction

Please provide a comprehensive technical breakdown of the JWT standard (RFC 7519) by addressing the following points:

1. Structural Analysis: Deconstruct a JWT into its three constituent parts—Header, Payload, and Signature—explaining the role of Base64Url encoding for each.
2. Payload Specification: Elaborate on standard "Registered Claim Names" (e.g., iss, sub, exp, iat) and provide guidance on best practices regarding what data should—and explicitly should not—be stored in the payload.
3. Verification Logic: Explain the mathematical process of signature verification. Describe how the server uses the secret or public key to validate the integrity and authenticity of the token.
4. Practical Demonstration: Provide a sample JWT and show its corresponding decoded JSON payload.

⚖️ Constraints & Tone

• Tone: Professional, authoritative, and instructional.
• Clarity: Avoid unnecessary jargon unless it is defined. Use precise terminology (e.g., JWS, claims, cryptographic hashing).
• Security Focus: Emphasize security best practices (e.g., why sensitive data must not be stored in the payload, the importance of signature verification).
• Length: Keep the explanation concise yet thorough, avoiding fluff.

📝 Output Format

Structure your response as follows:

• Executive Summary: A brief overview of what a JWT is.
• Anatomy of a Token: A breakdown of the three segments using a code block or table.
• Payload Best Practices: A list of key considerations for data inclusion.
• Verification Workflow: A step-by-step technical explanation of the validation process.
• Example Payload: A JSON block illustrating a standard, well-formed payload.

🧩 Variables

• [TARGET_AUDIENCE_EXPERTISE_LEVEL]: Junior Developers
• [ADDITIONAL_FOCUS_AREA]: Security best practices regarding token expiration and secret management