Question 1

Does it verify signatures?

Accepted Answer

No. The first version only decodes and displays the token.

Question 2

How is expiry determined?

Accepted Answer

If exp is present in the payload, the page compares it with the current browser time.

Question 3

Will invalid tokens show an error?

Accepted Answer

Yes. Invalid structure or malformed base64url data produces a clear error.