# JWT

> JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.
>
> [https://jwt.io/](https://jwt.io/)

## Format

> \[Header].\[Payload].\[Signature]

```
# Sample JWT
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoiMTIzIiwiaWF0IjoxNDcyNDM2NDc1LCJleHAiOjE0NzI0NDAwNzV9.A2QHa4uQXLMUk7lgb_-NshsWUpaRZQeRQ0flvkkrjNI

# Header
{"alg":"HS256","typ":"JWT"}

# Payload
{"user":"123","iat":1472436475,"exp":1472440075}

# Verify Signature
HMACSHA256( base64UrlEncode(header) + "." + base64UrlEncode(payload), <SECRET_KEY>)
```
