"alg": "HS256", "typ": "JWT"
✓ Signature valid If invalid:
✗ Signature mismatch For RS256 tokens, use a public key: jwudtool tutorial