What Is the iss Claim?

The iss (Issuer) claim identifies the principal that issued the JWT, typically your auth server URL.

Example

{ "iss": "https://auth.example.com" }

How to Inspect

Paste any JWT into JWT Decoder to see the iss claim in the decoded payload. Use JWT Debugger for validation warnings related to this claim.

Validation Rules

Must match your configured issuer URL exactly.

Validating the Claim

Always verify JWT claims during token validation. Use our Claims Viewer and Debugger to inspect claim values in real tokens.

Browse related resources: JWT Decoder, JWT Validator, JWT Basics, JWT Authentication, JWT Errors, Algorithms, Glossary, and Learning Path.

Try It Now

FAQ

What does this JWT claim mean?

See this page for a full explanation with JSON examples and validation rules for production APIs.

How do I view this claim in a token?

Paste your JWT into our free JWT Decoder or Claims Viewer to see all payload claims instantly.

Must I validate this claim server-side?

Registered claims like exp, iss, aud, and sub should always be validated during token verification.