Decode JSON Web Tokens — inspect header, payload, and signature. Your token never leaves your browser.