JWT decoder

Read a token's header, claims and expiry without sending it anywhere.

Decoded in your browser only. The signature isn't verified: that needs the issuer's key, so don't trust the contents just because they decode.