How to decode a JWT in the browser
A JWT looks secret. It is not. The header and the payload are only Base64url text. Anyone who has the token can read the claims. The signature is the part that proves the token was issued by someone w
kepttools.hashnode.dev3 min read