Security

JWT

A signed, self-contained token carrying claims, verifiable without a session lookup.

Why interviewers ask about it

State the cost: you cannot easily revoke one before it expires. Short-lived access tokens plus refresh tokens is the standard mitigation.

This term is part of the free Python Full-Stack interview preparation module - browse the full glossary for every definition.