Referenzbibliothek
JWT- und HMAC-Cheatsheet
JWT-, HMAC-, Hash-, Checksum- und Token-Erinnerungen für Entwicklung.
JWT parts
Referenz: JWTs are dot-separated Base64URL sections.
header.payload.signatureHMAC input
Referenz: HMAC signs a message with a shared secret.
HMAC_SHA256(secret, message)SHA checksum
Referenz: Checksums verify content equality, not identity.
sha256(file or text)Bearer header
Referenz: Common HTTP authorization header format.
Authorization: Bearer <token>