This part is metadata, e.g. the signature algorithm used and the type of JWT. Usually in JSON format

This part is business data, such as: user ID, user name, etc.. Usually in JSON format