Signed Token

An identity authentication mechanism in which the client carries a JWT or session cookie and the server, after verifying the signature, derives user identity and permissions from a trusted source, ensuring that identity is auditable and cannot be bypassed through forged parameters.