Software Architect's Handbook

Header

The header of a JSON web token typically has two pieces of information: the type of token ("JWT"), and the hashing algorithm being used (for example, HMAC SHA256). A sample header looks like the following:

{    "typ": "JWT",    "alg": "HS256"}

The header is Base64Url encoded prior to concatenating it with the other parts of the JWT.