RFC 7797: JSON Web Signature (JWS) Unencoded Payload Option
RFC 8725: JSON Web Token Best Current Practices