What's /token and /token/validate for?

I see that it's implemented for JWT, but I didn't find any API that need a JWT token to access.
Is the JWT part still in progress or it's just an example?
Some sort of newbie here. Sorry if my question seems silly.