class Acme::Client::Crypto

def generate_signed_jws(header:, payload:)
  jwt = JSON::JWT.new(payload || {})
  jwt.header.merge!(header || {})
  jwt.header[:jwk] = jwk
  jwt.signature = jwt.sign(private_key, :RS256).signature
  jwt.to_json(syntax: :flattened)
end