Hm, that's a surprising take. I think JWT is super simple. One header chunk, one data chunk, one signature chunk. Base64-encoded and concatenated. Done. You d

Hm, that's a surprising take. I think JWT is super simple. One header chunk, one data chunk, one signature chunk. Base64-encoded and concatenated. Done. You don't need a JWT library, although I guess I'm taking JSON parsing ability as a given. This seems reasonable -- anywhere JWT would make sense, JSON is likely established. Some of the other associated standards (JOSE, JWKS, etc) can get complicated, but JWT is about as simple as it gets.