JWT Reference

Complete reference for JSON Web Tokens.

Registered Claims

ClaimNameDescription
issIssuerIdentifies the principal that issued the JWT
subSubjectIdentifies the subject of the JWT
audAudienceIdentifies the recipients the JWT is intended for
expExpirationIdentifies the expiration time (Unix timestamp)
nbfNot BeforeIdentifies the time before which the JWT must not be accepted
iatIssued AtIdentifies the time the JWT was issued
jtiJWT IDUnique identifier for the JWT

Signing Algorithms

AlgorithmTypeDescription
HS256SymmetricHMAC with SHA-256
HS384SymmetricHMAC with SHA-384
HS512SymmetricHMAC with SHA-512
RS256AsymmetricRSA with SHA-256
RS384AsymmetricRSA with SHA-384
RS512AsymmetricRSA with SHA-512
ES256AsymmetricECDSA with SHA-256