prev <<
OAuth, RESTy APIs, Microservices, ...
>> next
JWT
Or you use a library to verify & unpack it: