eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2Q0JDLUhTNTEyIiwia2lkIjoiWkhIN2xqZk5YWjJKckFIUnVFUGpfdU1IY0NBTVpESTRZZjZIWGFGS2ZKTEJoWW9YNHdGNGFzTU80SEFqQWhka25nMWF0RlByMTRXUXlJSFU1b3RLNkEifQ..rLk0ur7MAmlBjKvk5eTRzA.F4X2d0z-z-8j4jEvFOySBjBf0GwlFYZ2yNArb6C2ix3Ca8C1tWYK0OfK4gjcJ5cFv6Y7RvKmVyUKpST62gT-0cWD-ugkN7x_IX192TPz_PBuPR7gxq-3z8VxI0n-UYEp76BCVzMpcCds9UvOXltIHh2ziDQ_6IqEqo2oRAB-ycRySMaPt48byCBPSmXlLrAyOUdhdO9ZpaL3c76y7OrLhLNhb4FfqGI30NulDGCS-iXbYYUIyYGoZ_WGmMEbOnYViYcaYPxzO90pOZpWt69sjQbFyvo7CAuErpRuhcjoEcEJr2fI6qq6Hbt0fcbE-UjSDckT6gHl5ZYL4kx3CbuohtTV8DP0I-Nm6d0a1nVJqOPzEzdbq465VMtf8WHsUloq8LO7uqznB_ea9pYTQiWEOf6MFkp6vN67FgUVKXKB0Ea6O32LhhzSWBGoNrQwDhteD1g_s6noRXku5W7BxObfztkIB7oj5G40I6VhlEPFs7MgsODoseZog59Mw5Nbw5xv.b4uXx99k7-W7X_HsYzBbKcBSvhX4Ig2EtqZPddlvTsc

JWE variant of JWT has five parts instead of three as in JWS.

  1. Header
  2. Symmetric key (encrypted using asymmetric key)
  3. Initialization Vector (IV)
  4. Payload (Symmetrically encrypted)
  5. Tag (Basically signature?)

This seems fucking stupid!