Feb 9 · 5 min read · JWTs are everywhere: API keys, session tokens, OAuth access tokens. When a request returns 401, the first thing to check is whether the token is present, valid, and not expired. You could read the spec and decode by hand, but that's slow. A JWT decod...
Join discussion
