4.1.2 Signing Algorithm

Topic Version1Published10/31/2016
For StandardETP v1.1

All tokens MUST be signed using one of the signing algorithms specified in Section 3.1 of RFC 7518 (https://tools.ietf.org/html/rfc7518#section-3.1 ) with one exception: Production implementations cannot use a signing algorithm of “none.” An example header using algorithm HS256 looks like this:

'{ "alg":"HS256", "typ":"JWT"}'