See this repository for the PASETO specification.

This repository contains the JSON-encoded test vectors for the various PASETO token formats, as well as for optional PASETO extensions.

You may not need every attribute within a given test. We erred on the side of over-specifying, rather than under-specifying.

At minimum, implementors MUST verify that the token decodes to payload when expect-fail is set to false. If expect-fail is set to true, payload MUST NOT decode; an error state must be the result of such operations (e.g. an exception is thrown).

When the keys are provided in multiple formats (raw binary OR PEM), implementors MAY select which test vector is easier to work with.