// Algorithm & Token Type
// Data & Claims
HMACSHA256( base64UrlEncode(header) + "." + base64UrlEncode(payload), your-256-bit-secret )