<!--
{
  "availability" : [

  ],
  "documentType" : "symbol",
  "framework" : "AppStoreServerAPI",
  "identifier" : "/documentation/AppStoreServerAPI/JWSDecodedHeader",
  "metadataVersion" : "0.1.0",
  "role" : "Object",
  "symbol" : {
    "kind" : "Object",
    "modules" : [
      "App Store Server API"
    ],
    "preciseIdentifier" : "data:app_store_server_api:JWSDecodedHeader"
  },
  "title" : "JWSDecodedHeader"
}
-->

# JWSDecodedHeader

A decoded JSON Web Signature (JWS) header containing transaction or renewal information.

```
object JWSDecodedHeader
```

## Discussion

The types [`JWSTransaction`](/documentation/AppStoreServerAPI/JWSTransaction) and [`JWSRenewalInfo`](/documentation/AppStoreServerAPI/JWSRenewalInfo) contain headers that are [`JWSDecodedHeader`](/documentation/AppStoreServerAPI/JWSDecodedHeader) objects when decoded. Use the information in the <doc://com.apple.documentation/documentation/AppStoreServerNotifications/JWSDecodedHeader> to validate the JWS signature. For more information about validating signatures, see the JSON Web Signature (JWS) [IETF RFC 7515](https://datatracker.ietf.org/doc/html/rfc7515) specification.

The App Store signs transaction and renewal information that you receive in <doc://com.apple.documentation/documentation/AppStoreServerNotifications/App-Store-Server-Notifications-V2> and in the [`App Store Server API`](/documentation/AppStoreServerAPI). It uses the following `x5c` certificate chain, in the following order:

1. A certificate that contains the public key that corresponds to the key the App Store uses to digitally sign the JWS. Section 4.11.10 Mac App Store Receipt Signing Certificates of the [Apple Inc. Certificate Practice Statement Worldwide Developer Relations](https://images.apple.com/certificateauthority/pdf/Apple_WWDR_CPS_v1.26.pdf) document defines the custom extensions this certificate uses.
2. An Apple intermediate certificate that contains an extension with the extension ID for `Apple Worldwide Developer Relations (1.2.840.113635.100.6.2.1)`.
3. An Apple root certificate.

For more information, or to download Apple’s root certificate, see [Apple PKI](https://www.apple.com/certificateauthority/).

## Topics

### Data types

[`alg`](/documentation/AppStoreServerAPI/alg)

An algorithm used to sign a JSON Web Signature.

[`x5c`](/documentation/AppStoreServerAPI/x5c)

The JSON Web Signature (JWS) header parameter that contains the certificate chain that corresponds to the key used to digitally sign the JWS.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)