Whose JWT token does Strapi return

Is a token generated by strapi-plugin-users-permissions using a library auth0/jsonwebtoken

You are getting this token on a successful login.

More about this here: Customize the JWT validation function