JWT Decoder

Inspect JWT header & payload locally — signature is NOT verified (never paste production secrets).