Decodes the header and payload claims of a JSON Web Token and reports whether a signature segment is present.
This decodes only; it does NOT verify the signature (that requires the issuer's key), so verified is always false. Never trust an unverified token for authorization decisions. Computed locally.
The JWT string to decode.