JSON Web Signature (RFC 7515)

1. JWS overview

   Header, payload and signature structure.

2. JOSE header parameters

   alg, kid, jwk, jku, x5c, crit and b64.

3. Message signature computation

   How to sign: encode header and payload, then sign input.

4. Message signature validation

   Verifying signature and header processing.

5. JWS Compact Serialization

   Three base64url segments separated by dots.

6. JWS JSON Serialization

   General and flattened JSON forms with multiple signatures.

7. Unencoded payload option

   The b64=false header for unencoded payloads.

8. Security considerations

   Key identification, algorithm confusion and replay.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.