Curious TechieDev Toolbox
Interactive LabLab #01

Interactive JWT Construction Lab

Experience how JSON Web Tokens work under the hood. Edit the JSON header and payload below to see the three Base64URL-encoded components assemble live.

1. HEADER (ALGORITHM & TYPE)Base64URL Part 1
2. PAYLOAD (DATA & CLAIMS)Base64URL Part 2
3. HMAC SHA-256 SIGNING SECRETUsed to generate signature

Assembled Compact JWT

..

How this token is generated:

1. Header: Base64URL(JSON.stringify(Header)) →

2. Payload: Base64URL(JSON.stringify(Payload)) →

3. Signature: HMACSHA256(HeaderB64 + "." + PayloadB64, Secret)