Glossary Terms: J

A JWT-SVID is the token form of a SPIFFE Verifiable Identity Document, structured as a signed JSON Web Token containing the workload’s SPIFFE ID as the subject claim. Unlike X.509-SVIDs, JWT-SVIDs are better suited for HTTP-based service calls and API authentication, where presenting a certificate in a TLS handshake is not practical. They carry the same short-lived, automatically rotated properties as X.509-SVIDs and are validated by relying services using the issuing trust domain’s public keys.

A compact, URL-safe means of representing claims to be transferred between two parties, commonly used for secure authentication and authorization in distributed systems.