JWE

JWE is the IETF standard for encrypting content into a compact, Base64url-encoded structure, the encryption counterpart to JWS. It is used when a token's payload must be hidden from the client carrying it, such as encrypted ID tokens in OpenID Connect. A JWE combines a key-wrapping algorithm with an AEAD content cipher like AES-GCM.