Prove token integrity
Signature verification confirms that the signed header and payload have not changed and match the supplied HMAC secret.
JWT Signature Verifier
Verify HS256, HS384, and HS512 JWT signatures locally with the expected shared secret.
Signature verifier
Verify HMAC JWT signatures with the expected shared secret.
A valid signature does not automatically validate expiration, issuer, audience, or application authorization.
Validate claims separately
Applications must still enforce expiration, issuer, audience, nonce, and authorization requirements after checking a signature.