The "protected" member MUST be present and contain the value BASE64URL(UTF8(JWS Protected Header)) when the JWS Protected Header value is non-empty; otherwise, it MUST be absent. These Header Parameter values are integrity protected.
The "signature" member MUST be present and contain the value BASE64URL(JWS Signature).
An entry of the
signatures
array in a general JWS.