JWT is a JSON-based security token for API AuthenticationJWT is just serialized, not encrypted. OAuth is not an API or a service: it's an open standard for authorization. OAuth is a standard set of steps for obtaining a token.