Generate keys:

make keys

Run issuer who creates the token:

# cpm install
carton exec -- perl issuer.pl

Run consumer who decrypt/verify the token:

# yarn
carton exec -- perl issuer.pl | node consumer.js

You may get the result such as:

✘╹◡╹✘ < carton exec -- perl ./issuer.pl | node ./consumer.js
{"uid":123}

Peek token:

✘╹◡╹✘ < carton exec -- perl ./issuer.pl | ruby ./peek_token.rb
{:header=>"{\"enc\":\"A256CBC-HS512\",\"alg\":\"RSA-OAEP\"}",
 :payload=>
  "A\x83\x84M7)\xEE\xB0\x0F'\xFC\xF4\x92\xC8w\t:\xFB\e\x14#\xA9G\xCAX(D\xA6\xB3\xF8F\xD5\x9DG\xDC\xFA$\x0E\xAA\xEEnC\x15\b\x17].U\x89\x05@\xB3\x83[\xCCK\x97\xDE,`\xF1\x18\x9E\x02)2\xAB\x86\x92\xFBbg.\xB3\xF6\x95B-\x8C\x9B\f%!\xB3\x06\xD3\x19\xB9\xD6S{\xD0bj\rQ\x99D\xFAE\xC0\x1A\x01\xA5\a\xCEo\xAD-a\xB8\xCB8I\x91I\xB7[m\x03ld\xE9\xB8\xE7b\xC6+\x92\xE2\xED\x00\xD2pSH\xAF\x86\xB0\x06\x86\xC3\xFFw~\xE1\xF0k\xED\x1FG\x8C\x8B\x0E\xE6\n" +
  "F\xBE\x81;!;\xBA\xA1\xBC\xCB\xED\x10\xCFZ+\xE6\v\x1E\xEB\xD7i\xAF\x9B\xDA\x86]IB\a$\xC0{\x04I\xDF\\\xB7\xF1\x81\n" +
  "G{\xFF\x04\xA0\xA9l\xBC\xAD\x92\xB6\n" +
  "\e-\x93\xBFnl]Q\xF5\x87\xAB\x97\xB4\"\x83\x98G\xE5\xDAZ6\xA2\xB6\x9B\xAD\x8C\xEA\x18\xBB\xB7\xB0\xF2G\xE8\x8C\xE3\xC9\xF4Q\xE7(\xB6q2D&\vS\x9AS\x96B\x85\x87\x1D\x12]\xFDg\xCE\xE7\xD3hpwm\xB6-h*i\x94F\x1C\xC1\v$4Q\xDE\x8A\xE2\xE5:\x85o\xF7H\xA4b\x14Uy\xCA25\xAB>\x85\xF7,&\x1A\x04\x1A\xCD\x14_\xAET\x02\x02\xF6d_1q\xF3{\x94\xDC\x17%\x97;\x90,\xE4jV\xCF\xA2{#\xBD\x1F\xB3\xA2\x04\xFD%\xBE\x0Fl\xC2\xBB\x00\x04\xB2\x8E\xC5\xC2\xDA\x19L\x90\xA6\xCE\xF9K\x93B\xCC3#\x91\xDA\xE2\xA4Z\xA4\x9E\"(/\xEA\x95\xBF\x18{\x83T\xC6 \xE0g\xDC[\x8BU\xC8.v\xEA\xE9x5|\xB6\x9F\x81\xE7\t`\x14\xD5lI)?\x8C\x81\x88\x8E\xA3\xD6\xDE;\x1A\x90\xAC@\xFCZ\xFD\bN9N\xFF)\x1E\xDD'\x95\x8D0\xA7\xFA\x8D\bt!u\xA1z\f}\x86.\xB7\xFF\xDB\x14\x06'y\xE1\xFC\xCB1\x87\xF2a\x8E\xE7u\xA3\xA8\xA9\x82\xBE\xF9\xC7{Of\x1F\x82\x05*cx\tm0\x12*\xCB\xE7\x18\x1D+S\xB3\xC4\f\xBF\xDE\xD1}KT\xB2",
 :sig=>"\xF6\xCD\x87b\xE4\xC4#\xF2\x98\xBC\xD4\xDE\x92\x18\x00\xD4"}

You can confirm decoded payload is encrypted.