JWT Validate Verify a JWT's signature and validate its claims. Confirms the token is authentic, unexpired, and structurally sound. Validation Order Check in this order. Stop and report at the first failure. 1. Structure - Exactly 3 dot-separated parts, each valid base64url - Header and payload parse as valid JSON - Header contains ; is not (unless explicitly expected) 2. Claims - must be in the future (report time until expiry or how long ago it expired) - must be in the past or present - must be in the past; flag if 30 days old - , , — if user provides expected values, they must match - Allo…