How to design a good JWT authentication filter : <p>I am new to JWT. There isn't much information available in the web, since I came here as a last resort. I already developed a spring boot application using spring security using spring session. Now instead of spring session we are moving to JWT.  I found few links and now I can able to authenticate a user and generate token. Now the difficult part is, I want to create a filter which will be authenticate every request to the server,</p>

<ol>
<li>How will the filter validate the token? (Just validating the signature is enough?)</li>
<li>If someone else stolen the token and make rest call, how will I verify that.</li>
<li>How will I by-pass the login request in the filter? Since it doesn't have authorization header.</li>
</ol>
