Security & Sync/JWT Authentication
1 min read
JWT Authentication
Using signed JWTs to securely authenticate the client.
Once the verification process succeeds (Status VERIFIED), our API returns a signed JWT (JSON Web Token) using the HS256 algorithm. The signing key is your project's Webhook Secret.
This token contains:
- The user's phone number
- Your project ID
trustScore: Device trustworthiness for Adaptive Security.
You can safely verify this token in your backend to ensure 100% that the verification wasn't spoofed.