I implemented (the initial version of) this project as part of a student project! Quite a surprise to see someone post it on Hacker News.

Is this just like super bare bones jwt signing and validation for iot devices?