JWT Claims

Definitions

Key-value pairs encoded in a JSON Web Token's payload that carry information about the authenticated entity. Standard claims include sub (subject), exp (expiration), iat (issued at), iss (issuer), and aud (audience). Custom claims carry application-specific data like roles and permissions. Claims are signed but NOT encrypted — don't put secrets in them.
In plain English: The pieces of information stored inside a JWT token, like who you are, what you can do, and when the token expires.
Example: "The JWT has a roles claim with ["admin", "editor"] — the API checks this claim to authorize the request. Never put PII in unencrypted JWTs."