Encoded Token (JWT) Header (JSON) {"alg":"HS256","typ":"JWT"} Payload (JSON) {"sub":"1234567890","name":"John Doe","iat":1516239022} Verify Signature / Secret (HS256)