An unsigned JWT has the header value alg: none
and an empty JWS (signature) component:
eyJhbGciOiJub25lIn0
.eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ
.
The trailing dot indicates that the signature is empty.
{
"alg": "none"
}
{
"iss": "joe",
"exp": 1300819380,
"http://example.com/is_root": true
}