JWT Token Debugging for API Developers

JWTs are everywhere: API keys, session tokens, OAuth access tokens. When a request returns 401, the first thing to check is whether the token is present, valid, and not expired. You could read the spec and decode by hand, but that's slow. A JWT decod...