A compact token comes apart
01A JWT carries a JSON claims set inside a JWS or JWE representation.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 3 ↗
RFC 7519 · § 3EXAMPLE
4 / 4
04
Authenticate the protected bytes.
Use the intended algorithm and a trusted, appropriate key.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Decoding is not verification.
- Compact JWS has three period-separated parts; compact JWE has five.
- Base64url is an encoding, not encryption.
- A JOSE header describes the cryptographic operation; it is not a trusted policy by itself.
The examples simplify the wire representation. Follow the linked specification and application profile for implementation.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy