can we say that JWT is an implementation of OAuth2 ? like for example JPA and Hibernate JPA is a specification and hibernate is the implementation of JPA Thanks