Paste a token to decode it, and add a secret or public key to check its signature.
Write a header and payload, add a secret or private key, and get a signed token.