decodeUnverified

Decode the JWT body's data claim into T without verifying the signature.

Use only for client-only display. NEVER decode the JWT here and send the resulting values to a backend or use them for any security-sensitive decision. Forward jwt to a backend, verify it there with your YAXI API secret, and use the verified payload from the backend instead. See Verify results for backend snippets.

Throws

if the JWT cannot be decoded.