2017-07-15 UTC
# 
puckipedia anyways, then you take the key, and build a header which tells you how the payload is secured (e.g. signed with a specific alg using a specific key id). now you have two parts. you base64url-encode both of them, and put a . inbetween them