How to secure a REST API using JWT authentication - LogRocket Blog

Josef Bajada says:
You swapped the meaning of the issuer and the subject. The issuer is the authentication server which issued the token (usually a URI). The subject is the user being authenticated.




