JSON Web Tokens (JWT)

Build the stateless auth token that backs modern APIs: base64url encoding, the header.payload signing input, an HMAC-SHA256 signature, verification with a constant-time compare, and expiry (exp) enforcement — so you understand exactly what a JWT is and why a tampered one fails.