Summary

Tokens have a purpose, a format and a type

• Purpose is the intended use

• Format is the encoding

• Type is the way it can be sent

By value and by reference

• JWT is by value

Using JWTs is not enough

• Must follow a protocol