# Standards and References - JWT Signing and Verification

## Primary Standards

### RFC 7519 - JSON Web Token (JWT)
- **URL**: https://www.rfc-editor.org/rfc/rfc7519
- **Description**: JWT format and claims specification

### RFC 7515 - JSON Web Signature (JWS)
- **URL**: https://www.rfc-editor.org/rfc/rfc7515
- **Description**: Signature mechanism for JWTs

### RFC 7517 - JSON Web Key (JWK)
- **URL**: https://www.rfc-editor.org/rfc/rfc7517
- **Description**: Key format for JWT signing keys

### RFC 7518 - JSON Web Algorithms (JWA)
- **URL**: https://www.rfc-editor.org/rfc/rfc7518
- **Description**: Cryptographic algorithms for JWS/JWE

### RFC 8725 - JWT Best Current Practices
- **URL**: https://www.rfc-editor.org/rfc/rfc8725
- **Description**: Security best practices for JWT implementations

## OWASP References

### OWASP JWT Cheat Sheet
- **URL**: https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.html

## Python Libraries

### PyJWT
- **URL**: https://pyjwt.readthedocs.io/
- **PyPI**: https://pypi.org/project/PyJWT/

### python-jose
- **URL**: https://python-jose.readthedocs.io/
- **PyPI**: https://pypi.org/project/python-jose/
