return base64-encoded a ciphered JWT with PKCS8 with a RSA private key.

return plain text deciphered.

get a key from a header or from the query.

get the credentials from HTTP basic auth.

get the token from Bearer format.

verify the given JWT against the secret and the expiration date.