Encoded

JSON Web Token

Decoded

Header:

Payload:

Signature is

signHMACSHA256(
  base64Url(header) + "." +
  base64Url(payload),
)