Compact, URL-safe token format for transmitting claims between parties. Self-contained and cryptographically signed. Widely used in OIDC and API authentication.