How to Read a JWT Without Trusting a Third-Party Server

Last month I watched a colleague paste a production JWT into the first Google result for "jwt decode...