JWT verifier
Check a JSON Web Token’s signature with a secret, PEM key or JWK.
The shared secret for HS tokens; otherwise a PEM public key or X.509 certificate, a JWK, or a JWKS (picked by kid).
Tokens and keys stay in your browser and are never saved. A valid signature does not mean the claims are acceptable; check the issuer, audience and expiry too.