typ | The value is always JWT |
cty | Content type, used when the payload contains another JWT (in which case the value of cty should be JWT ) |
alg | The algorithm which was used to sign (typically HMAC with SHA-256 (HS256) or RSA with SHA-256 (RS256)). |