...Use composer to manage your dependencies and download PHP-JWT. Optionally, install the paragonie/sodium_compat package from composer if your php is < 7.2 or does not have libsodium installed. If your private key contains \n characters, be sure to wrap it in double quotes "" and not single quotes '' in order to properly interpret the escaped characters. You must specify supported algorithms for your application. You can add a leeway to account for when there is a clock skew times between the signing and verifying servers. It is recommended that this leeway should not be bigger than a few minutes.