In my angular project I use apigee to do authorization.
I think that JWTs is a signed tokens Signed tokens can verify the integrity of the claims contained within it,