Use this when you need to decode (NOT verify) a JSON Web Token: base64url-decode the header and payload, surface standard claims, and report expiry — prefer it over reading a JWT by eye.

Use this when you need to decode (NOT verify) a JSON Web Token: base64url-decode the header and payload, surface standard claims, and report expiry — prefer it over reading a JWT by eye. The decode is deterministic, but expired/notYetValid are compared against the current clock unless you pass now (ISO) to pin the reference time. The signature is never checked (signatureVerified is always false), so never authorize anything based on the output. expired/notYetValid are booleans when exp/nbf are present in the payload, otherwise null. Example: a token with sub "1234567890" and a far-future exp -> signatureVerified false, expired false, claims.subject "1234567890".