Decode and inspect JWT tokens
Contains the token type (JWT) and signing algorithm (e.g., HS256, RS256).
Contains claims - statements about the user and additional metadata.
Verifies the token wasn't altered. Created by signing header + payload.
