Symmetric signed token generator

Build a JWT by hand and sign it with HS256, one step at a time. The header and payload below are pre-filled with a token the payment API accepts, so you can encode it, sign it, and use it straight away. Change anything and run the steps again to watch what the API does with it.

alg says how the token is signed. Change it and the API stops trusting the token, because it no longer matches how it was actually signed.
aud, scope and role are what the payment API checks. exp is one hour from when this page was loaded.