JWT

A field whose value is a JSON Web Token (JWT) (opens in a new tab).

The scalar checks only the format (header.payload.signature) using a regex and not the validity (signature) of the token.