In Listing 6.3, there's a line that goes: ```java var header = new JWSHeader(JWSAlgorithm.HS256); ``` Presumably, this should instead be: ```java var header = new JWSHeader(algorithm); ``` since the algorithm is supposed to be passed as a constructor parameter.