- In this setup, the application server would be configured to verify that the incoming JWT are created by the authentication server.
- When the user makes API calls with the attached JWT, the application can use the JWT to verify that the API call is coming from an authenticated user.
- Using Postman
- The API call is coming from an authenticated user.