JWT Validator

Decode JWT header and payload, validate time-based claims, and optionally verify HS256 signature.