JWT for APIs

Thanks Paul

Here is how I actually implemented : the request is sent along with encoded token. Server then decodes token and verify if the valid param is qualified for a response
For me obviously, only trusted client can have the passphrase to encode it , likewise on server end. I just tried to think deep if I have security hole anywhere along
the path. JWT is much alike with API keys method.

Thanks