are json web tokens safe?
The contents in a json web token (JWT) are not inherently secure, but there is a built-in feature for verifying token authenticity. ... In a public/private key system, the issuer signs the token signature with a private key which can only be verified by its corresponding public key.