Inspect the header, payload and expiry of a token — locally, obviously.
Runs offline · nothing is uploaded