Good tips, especially the part about checking exp, iat, and nbf. JWT time issues can be really confusing sometimes. I usually check Unix timestamps with the APIFreaks timestamp converter when debugging JWTs. Makes it easier to quickly see if the token is expired or not. Also, Mikasa Ackerman is a great character choice.