JWS

JWT signature - integrity and origin.

Definition

JWS algorithms: HS256 (HMAC-SHA256), RS256 (RSA-PKCS1-v1.5 SHA-256), PS256 (RSA-PSS SHA-256), ES256 (ECDSA P-256 SHA-256), EdDSA (Ed25519). Compact serialization JOSE Header.Payload.Signature or JSON serialization (object with payload, signatures array).

Origin

IETF JOSE WG ; RFC 7515 published May 2015.

Example in context

A GitHub API access token is a JWS signed RS256 containing sub, scope, exp 8h.

Related terms

• JWT — parent format.