What are claims?
Claims are the statements in the payload of a token. The standard registered claims are short names with agreed meanings, and you can add your own.
- iss the issuer of the token.
- sub the subject, usually the user.
- aud the audience the token is for. Enter several values separated by commas to make a list.
- exp the expiry time. After it, the token must be rejected.
- nbf not before. The token is not valid until then.
- iat when the token was issued.
- jti a unique ID for the token.
Times are numbers
The time claims use a number of seconds since 1 January 1970 UTC, known as a Unix timestamp. That is hard to read, so this builder lets you pick a date and time, or use a preset such as 15 minutes, 1 hour, 24 hours or 7 days from now. The table underneath shows each time claim as a readable date and as a distance from now.
Custom claims
Add public or private claims as a JSON object, such as a role, a plan or a tenant. Keep them small, because a token travels with every request. Avoid secrets, since the payload is readable by anyone who holds the token.
Output
You get the payload as JSON and as Base64URL, ready to use as the middle segment of a token.
To sign a token from your payload, use the JWT encoder. For a quick form that fills in the claims and signs in one step, try create token. The header builder covers the first segment, and the guide covers the concepts.