Skip to main content

Signatures

Omit signature to let JWTForge sign normally with its active key:

{
  "body": {
    "sub": "user123"
  }
}
POST /token
Request
{
  "body": {
    "sub": "user123"
  }
}
Response
No response yet
Decoded token
No token yet

Set signature to false to generate an unsigned trailing-dot token:

{
  "header": {
    "alg": "none"
  },
  "body": {
    "sub": "admin"
  },
  "signature": false
}
POST /token
Request
{
  "header": {
    "alg": "none"
  },
  "body": {
    "sub": "admin"
  },
  "signature": false
}
Response
No response yet
Decoded token
No token yet

Pass a string to use a literal signature segment:

{
  "body": {
    "sub": "user123"
  },
  "signature": "literal-signature"
}
POST /token
Request
{
  "body": {
    "sub": "user123"
  },
  "signature": "literal-signature"
}
Response
No response yet
Decoded token
No token yet

Private-key signing from request payloads is reserved for a future extension.