'just an hmac token', but attached to the payload in a well-structured way. Very required for the proliferation of libraries across all languages.

There is also JSON Web Encryption, built on top of JWT, which provides encryption in addition to signatures. https://tools.ietf.org/html/draft-ietf-jose-json-web-encrypt...