A user’s login information is passed to a server-side authentication API. When the server validates the credentials, it produces a JSON web token (JWT), which contains the current user’s characteristics and data. Furthermore, JWT allows the user to be readily recognized, a process called authentication.
Users have different sorts and levels of access after signing in—some may access everything, while others may be restricted from certain sites. The level of access these users have is determined by authorization.