Using JWT to implement Authentication on Asp.net web API
Your understanding of JWTs is good. But here are a couple corrections and some recommendations. Authentication and Authorization JWTs have nothing to do with authentication. Hitting your DB and hashing passwords only happens when you authenticate on creation of the JWT. This is orthogonal to JWTs and you can do that in any way you … Read more