Good tips, especially the part about checking exp, iat, and nbf. JWT time issues can be really confusing sometimes.
I usually check Unix timestamps with the APIFreaks timestamp converter when debugging JWTs. Makes it easier to quickly see if the token is expired or not.
Also, Mikasa Ackerman is a great character choice.