Performs a fast, unverified decode of a JSON Web Token (JWT) payload. The payload is unverified and attacker-controlled. Use only for reading public claims and must not be used for authentication, authorization, or any other security decision.
The JWT string to decode
The parsed payload object, or null if decoding fails
const payload = decodeJWT`<MyClaims>`(token); Copy
const payload = decodeJWT`<MyClaims>`(token);
Performs a fast, unverified decode of a JSON Web Token (JWT) payload. The payload is unverified and attacker-controlled. Use only for reading public claims and must not be used for authentication, authorization, or any other security decision.