22.3.4. Algorithm Previous topic Parent topic Child topic Next topic

Typically SHA1. Other values are permissible but may not be supported by all client apps. The value is set when the token is created.