What is JWT?
Part | Contents | Encoding |
---|---|---|
Header | Metadata about the key id, signing algorithm and etc. | base64-encoded JSON |
Payload | Claims (data) you want to transmit | base64-encoded JSON |
Signature | Signature of base64url(header) + "." + base64url(payload) using private key | binary → base64url |
Header | eyJraWQiOiJCdWp0RjQwZlUyNXBGdlNabEdrQyIsImFsZyI6IkVTMjU2In0 |
Payload | eyJpYXQiOjE3NDkyMTI4NDQsIm1lc3NhZ2UiOiJhcnRlbS13YXMtaGVyZSJ9 |
Signature | NtTsKix0Fj6gXA9sSInfW9PRqO82RlLHyvY_ZKRkpofBeUHU8gsDnHP7_OjUeoB4nYHhsps1RLWFjzkyaJCkwQ |
Field | Description |
---|---|
alg | Signing algorithm |
kid | Your API key identity ID from the Bron App |
Prepare Your Credentials
kid
) in the JWT header.Create the Message String
iat | Current timestamp in seconds (same value used in JWT payload) |
HTTP_METHOD | HTTP method in uppercase (GET, POST, PUT, DELETE) |
REQUEST_PATH | Full request path including query parameters (e.g. /api/v1/users?limit=10 ) |
REQUEST_BODY | JSON string exactly as sent (or noting if none) |
Generate SHA256 Hash
"message"
.Sign the JWT
Time | 1749219350 |
Message | 1749219350GET/workspaces/bron |
SHA256 Hash | 25e783b978eb059ef4ece027198e974a1ef7f00608f5033e101a1b956b6c8acd |