JWT
A signed token carrying who the user is and when the token expires, which a server can check without a database lookup.
A JSON Web Token is a base64url-encoded header, claims set and signature; a server verifies the signature and the expiry claim before trusting the claims.
Examples
The greenhouse back end's JWT has a header
{"alg": "HS256", "typ": "JWT"}and claims such assub(the user) andexp(expiry), checked with the server's secret instead of a database lookup.
See also