19.3.5 JWT