Encode and decode JSON web tokens.
Einhugur JWT Plugin for Xojo
Einhugur JWT Plugin generates JSON Web Tokens and to validate JSON Web Tokens in Xojo applications.
Einhugur JWT Plugin is new for Omegabundle for Xojo 2025.
Features | Platform Targets |
|
|
What is a JSON Web Token?
A JSON Web Token (JWT) is a signed, URL-safe string that encodes claims (like user ID and roles).
- The server issues a JWT after authentication
- The client sends the token with each request, typically in the Authorization header
- The server validates the signature to ensure integrity and authenticity, without keeping session state
JWTs work well for stateless authentication in APIs and distributed systems. Outside of authentication, JWTs work as a secure, portable way to carry claims:
- Information exchange – send signed/verified data between systems.
- Stateless session data – store temporary user state or preferences without a DB
- Single Sign-On (SSO) – share identity across apps or domains
- API access delegation – act as scoped, time-limited tokens
- Workflow state – pass trusted state between microservices
- Mobile/IoT – lightweight token for devices without session storage