Software Engineer
mediumoauth2-vs-jwt

OAuth 2.0 vs JWT: what’s the difference?

Answer

**OAuth 2.0** is an authorization framework (how clients get access). **JWT** is a token format (how a token is represented). You can use OAuth 2.0 with JWT access tokens, but OAuth tokens can also be opaque. **Interview tip:** mention access tokens vs refresh tokens, scopes, and that OpenID Connect adds authentication on top of OAuth 2.0.

Related Topics

SecurityAuthenticationAPI